./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3971530889 <...> Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts. execve("./syz-executor3971530889", ["./syz-executor3971530889"], 0x7ffd6af376a0 /* 10 vars */) = 0 brk(NULL) = 0x5555570a9000 brk(0x5555570a9d40) = 0x5555570a9d40 arch_prctl(ARCH_SET_FS, 0x5555570a93c0) = 0 set_tid_address(0x5555570a9690) = 5072 set_robust_list(0x5555570a96a0, 24) = 0 rseq(0x5555570a9ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3971530889", 4096) = 28 getrandom("\x86\x3a\x1a\xb3\x31\x4b\xac\xd0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555570a9d40 brk(0x5555570cad40) = 0x5555570cad40 brk(0x5555570cb000) = 0x5555570cb000 mprotect(0x7f8786518000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 mkdir("./syzkaller.hj4rDy", 0700) = 0 chmod("./syzkaller.hj4rDy", 0777) = 0 chdir("./syzkaller.hj4rDy") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x5555570a9690) = 5073 [pid 5073] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5073] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5073] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [pid 5073] dup2(4, 202) = 202 [pid 5073] close(4) = 0 [pid 5073] write(202, "\xff\x00", 2) = 2 [pid 5073] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 5073] rt_sigaction(SIGRT_1, {sa_handler=0x7f87864b7c50, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f87864a8e00}, NULL, 8) = 0 [pid 5073] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5073] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c4d000 [pid 5073] mprotect(0x7f8785c4e000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 5073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f878644d990, parent_tid=0x7f878644d990, exit_signal=0, stack=0x7f8785c4d000, stack_size=0x800300, tls=0x7f878644d6c0}./strace-static-x86_64: Process 5076 attached [pid 5076] rseq(0x7f878644dfe0, 0x20, 0, 0x53053053 [pid 5073] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5076] <... rseq resumed>) = 0 [pid 5073] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] set_robust_list(0x7f878644d9a0, 24 [pid 5073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5073] ioctl(3, HCIDEVUP [pid 5076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5076] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5076] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [ 86.268073][ T5074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.276556][ T5074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.297185][ T5074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [pid 5076] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5076] read(202, [pid 5073] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [ 86.326628][ T5074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.335770][ T5074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.353970][ T5074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 5073] ioctl(3, HCISETSCAN [pid 5076] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5076] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5076] rt_sigprocmask(SIG_BLOCK, ~[RT_1], NULL, 8) = 0 [pid 5073] <... ioctl resumed>, 0x7ffd5084a080) = 0 [pid 5076] madvise(0x7f8785c4d000, 8372224, MADV_DONTNEED [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5076] <... madvise resumed>) = 0 [pid 5073] <... writev resumed>) = 13 [pid 5076] exit(0 [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5076] <... exit resumed>) = ? [pid 5073] <... writev resumed>) = 14 [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14 [pid 5076] +++ exited with 0 +++ [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 5073] close(3) = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setsid() = 1 [pid 5073] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5073] unshare(CLONE_NEWNS) = 0 [pid 5073] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5073] unshare(CLONE_NEWIPC) = 0 [pid 5073] unshare(CLONE_NEWCGROUP) = 0 [pid 5073] unshare(CLONE_NEWUTS) = 0 [pid 5073] unshare(CLONE_SYSVSEM) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "16777216", 8) = 8 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "536870912", 9) = 9 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "8192", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5073] close(3) = 0 [pid 5073] getpid() = 1 [pid 5073] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5079] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5078] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5079] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5079] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5079] munmap(0x7f877d82c000, 138412032) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5079] close(3) = 0 [pid 5079] mkdir("./file0", 0777) = 0 [ 87.025625][ T5079] loop0: detected capacity change from 0 to 32768 [ 87.053433][ T5079] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5079) [ 87.074207][ T5079] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 87.083562][ T5079] BTRFS info (device loop0): force clearing of disk cache [ 87.091022][ T5079] BTRFS info (device loop0): setting nodatasum [ 87.097297][ T5079] BTRFS info (device loop0): allowing degraded mounts [ 87.104142][ T5079] BTRFS info (device loop0): enabling disk space caching [ 87.111151][ T5079] BTRFS info (device loop0): disk space caching is enabled [ 87.137321][ T5079] BTRFS info (device loop0): enabling ssd optimizations [ 87.144639][ T5079] BTRFS info (device loop0): auto enabling async discard [ 87.154706][ T5079] BTRFS info (device loop0): rebuilding free space tree [ 87.156072][ T1508] cfg80211: failed to load regulatory.db [pid 5079] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file0") = 0 [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] close(4) = 0 [pid 5079] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5079] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] open("./file0", O_RDONLY) = 4 [pid 5079] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = 0 [ 87.188437][ T5079] BTRFS info (device loop0): disabling free space tree [ 87.195640][ T5079] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.206094][ T5079] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.221590][ T5079] BTRFS info (device loop0): checking UUID tree [pid 5078] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 1 [pid 5079] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5079] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 1 [pid 5079] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5078] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5097 attached [pid 5097] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5078] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5097] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5078] rt_sigprocmask(SIG_SETMASK, [], [pid 5097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5097] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] open("./file0", O_RDONLY [pid 5078] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... open resumed>) = 5 [pid 5097] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5097] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 87.312711][ T5079] BTRFS info (device loop0): balance: start -d -m [ 87.326895][ T5079] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5097] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 87.411531][ T5079] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5097] <... ioctl resumed>) = 0 [pid 5097] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5079] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5079] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] close(4) = 0 [pid 5078] close(5) = 0 [pid 5078] close(6) = -1 EBADF (Bad file descriptor) [pid 5078] close(7) = -1 EBADF (Bad file descriptor) [pid 5078] close(8) = -1 EBADF (Bad file descriptor) [pid 5078] close(9) = -1 EBADF (Bad file descriptor) [pid 5078] close(10) = -1 EBADF (Bad file descriptor) [ 87.539785][ T5079] BTRFS info (device loop0): 1 enospc errors during balance [ 87.547261][ T5079] BTRFS info (device loop0): balance: ended with status: -28 [pid 5078] close(11) = -1 EBADF (Bad file descriptor) [pid 5078] close(12) = -1 EBADF (Bad file descriptor) [pid 5078] close(13) = -1 EBADF (Bad file descriptor) [pid 5078] close(14) = -1 EBADF (Bad file descriptor) [pid 5078] close(15) = -1 EBADF (Bad file descriptor) [pid 5078] close(16) = -1 EBADF (Bad file descriptor) [pid 5078] close(17) = -1 EBADF (Bad file descriptor) [pid 5078] close(18) = -1 EBADF (Bad file descriptor) [pid 5078] close(19) = -1 EBADF (Bad file descriptor) [pid 5078] close(20) = -1 EBADF (Bad file descriptor) [pid 5078] close(21) = -1 EBADF (Bad file descriptor) [pid 5078] close(22) = -1 EBADF (Bad file descriptor) [pid 5078] close(23) = -1 EBADF (Bad file descriptor) [pid 5078] close(24) = -1 EBADF (Bad file descriptor) [pid 5078] close(25) = -1 EBADF (Bad file descriptor) [pid 5078] close(26) = -1 EBADF (Bad file descriptor) [pid 5078] close(27) = -1 EBADF (Bad file descriptor) [pid 5078] close(28) = -1 EBADF (Bad file descriptor) [pid 5078] close(29) = -1 EBADF (Bad file descriptor) [pid 5078] exit_group(0 [pid 5097] <... futex resumed>) = ? [pid 5079] <... futex resumed>) = ? [pid 5097] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 5078] <... exit_group resumed>) = ? [pid 5078] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./0/binderfs") = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./0/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./0") = 0 [pid 5073] mkdir("./1", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached , child_tidptr=0x5555570a9690) = 6 [pid 5099] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5099] chdir("./1") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5099] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5100 attached [pid 5100] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5099] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5100] <... rseq resumed>) = 0 [pid 5099] rt_sigprocmask(SIG_SETMASK, [], [pid 5100] set_robust_list(0x7f8785c4c9a0, 24 [pid 5099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5099] <... futex resumed>) = 0 [pid 5100] memfd_create("syzkaller", 0 [pid 5099] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5100] <... memfd_create resumed>) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5100] munmap(0x7f877d82c000, 138412032) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 88.275268][ T5100] loop0: detected capacity change from 0 to 32768 [ 88.290647][ T5100] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5100) [ 88.308040][ T5100] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 88.317283][ T5100] BTRFS info (device loop0): force clearing of disk cache [ 88.324439][ T5100] BTRFS info (device loop0): setting nodatasum [ 88.330602][ T5100] BTRFS info (device loop0): allowing degraded mounts [ 88.337410][ T5100] BTRFS info (device loop0): enabling disk space caching [ 88.344497][ T5100] BTRFS info (device loop0): disk space caching is enabled [ 88.365692][ T5100] BTRFS info (device loop0): enabling ssd optimizations [ 88.372669][ T5100] BTRFS info (device loop0): auto enabling async discard [ 88.381354][ T5100] BTRFS info (device loop0): rebuilding free space tree [ 88.396194][ T5100] BTRFS info (device loop0): disabling free space tree [ 88.403081][ T5100] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.412809][ T5100] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5100] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5100] chdir("./file0") = 0 [pid 5100] ioctl(4, LOOP_CLR_FD) = 0 [pid 5100] close(4) = 0 [pid 5100] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5099] <... futex resumed>) = 1 [pid 5100] open("./file0", O_RDONLY [pid 5099] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... open resumed>) = 4 [pid 5100] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [ 88.424529][ T5074] Bluetooth: hci0: command 0x0409 tx timeout [ 88.427990][ T5100] BTRFS info (device loop0): checking UUID tree [pid 5100] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 0 [pid 5100] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5099] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 0 [pid 5100] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 88.500701][ T5100] BTRFS info (device loop0): balance: start -d -m [ 88.512118][ T5100] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5099] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5099] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5118 attached => {parent_tid=[8]}, 88) = 8 [pid 5118] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5099] rt_sigprocmask(SIG_SETMASK, [], [pid 5118] <... rseq resumed>) = 0 [pid 5118] set_robust_list(0x7f8785c2b9a0, 24 [pid 5099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5099] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] open("./file0", O_RDONLY) = 5 [pid 5118] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5118] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] <... futex resumed>) = 0 [pid 5118] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 88.541189][ T5100] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5099] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5118] <... ioctl resumed>) = 0 [pid 5118] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.719375][ T5100] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 88.745211][ T5100] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5118] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5100] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] close(3) = 0 [pid 5099] close(4) = 0 [pid 5099] close(5) = 0 [pid 5099] close(6) = -1 EBADF (Bad file descriptor) [pid 5099] close(7) = -1 EBADF (Bad file descriptor) [pid 5099] close(8) = -1 EBADF (Bad file descriptor) [pid 5099] close(9) = -1 EBADF (Bad file descriptor) [pid 5099] close(10) = -1 EBADF (Bad file descriptor) [pid 5099] close(11) = -1 EBADF (Bad file descriptor) [ 88.765797][ T5100] BTRFS info (device loop0): balance: ended with status: 0 [pid 5099] close(12) = -1 EBADF (Bad file descriptor) [pid 5099] close(13) = -1 EBADF (Bad file descriptor) [pid 5099] close(14) = -1 EBADF (Bad file descriptor) [pid 5099] close(15) = -1 EBADF (Bad file descriptor) [pid 5099] close(16) = -1 EBADF (Bad file descriptor) [pid 5099] close(17) = -1 EBADF (Bad file descriptor) [pid 5099] close(18) = -1 EBADF (Bad file descriptor) [pid 5099] close(19) = -1 EBADF (Bad file descriptor) [pid 5099] close(20) = -1 EBADF (Bad file descriptor) [pid 5099] close(21) = -1 EBADF (Bad file descriptor) [pid 5099] close(22) = -1 EBADF (Bad file descriptor) [pid 5099] close(23) = -1 EBADF (Bad file descriptor) [pid 5099] close(24) = -1 EBADF (Bad file descriptor) [pid 5099] close(25) = -1 EBADF (Bad file descriptor) [pid 5099] close(26) = -1 EBADF (Bad file descriptor) [pid 5099] close(27) = -1 EBADF (Bad file descriptor) [pid 5099] close(28) = -1 EBADF (Bad file descriptor) [pid 5099] close(29) = -1 EBADF (Bad file descriptor) [pid 5099] exit_group(0 [pid 5100] <... futex resumed>) = ? [pid 5099] <... exit_group resumed>) = ? [pid 5118] <... futex resumed>) = ? [pid 5118] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=46 /* 0.46 s */} --- [pid 5073] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./1/binderfs") = 0 [pid 5073] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./1/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./1") = 0 [pid 5073] mkdir("./2", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5119 attached [pid 5119] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 9 [pid 5119] <... set_robust_list resumed>) = 0 [pid 5119] chdir("./2") = 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5119] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5119] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5120 attached [pid 5120] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5120] set_robust_list(0x7f8785c4c9a0, 24 [pid 5119] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] rt_sigprocmask(SIG_SETMASK, [], [pid 5120] rt_sigprocmask(SIG_SETMASK, [], [pid 5119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5119] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] memfd_create("syzkaller", 0 [pid 5119] <... futex resumed>) = 0 [pid 5119] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5120] <... memfd_create resumed>) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5120] munmap(0x7f877d82c000, 138412032) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5120] close(3) = 0 [pid 5120] mkdir("./file0", 0777) = 0 [ 89.341375][ T5120] loop0: detected capacity change from 0 to 32768 [ 89.356297][ T5120] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5120) [ 89.372975][ T5120] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 89.382263][ T5120] BTRFS info (device loop0): force clearing of disk cache [ 89.389507][ T5120] BTRFS info (device loop0): setting nodatasum [ 89.395702][ T5120] BTRFS info (device loop0): allowing degraded mounts [ 89.402451][ T5120] BTRFS info (device loop0): enabling disk space caching [ 89.409515][ T5120] BTRFS info (device loop0): disk space caching is enabled [ 89.430989][ T5120] BTRFS info (device loop0): enabling ssd optimizations [ 89.438106][ T5120] BTRFS info (device loop0): auto enabling async discard [ 89.446513][ T5120] BTRFS info (device loop0): rebuilding free space tree [ 89.458592][ T5120] BTRFS info (device loop0): disabling free space tree [ 89.465562][ T5120] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.475395][ T5120] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5120] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5120] chdir("./file0") = 0 [pid 5120] ioctl(4, LOOP_CLR_FD) = 0 [pid 5120] close(4) = 0 [pid 5120] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5119] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] open("./file0", O_RDONLY) = 4 [pid 5120] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5119] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5120] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5119] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 89.489204][ T5120] BTRFS info (device loop0): checking UUID tree [pid 5119] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5119] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5119] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5119] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5138 attached => {parent_tid=[11]}, 88) = 11 [ 89.538290][ T5120] BTRFS info (device loop0): balance: start -d -m [ 89.548049][ T5120] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5119] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... rseq resumed>) = 0 [pid 5138] set_robust_list(0x7f8785c2b9a0, 24 [pid 5119] <... futex resumed>) = 0 [pid 5138] <... set_robust_list resumed>) = 0 [pid 5119] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] open("./file0", O_RDONLY) = 5 [pid 5138] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5119] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 89.580434][ T5120] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5119] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5138] <... ioctl resumed>) = 0 [pid 5138] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 89.747094][ T5120] BTRFS info (device loop0): found 8 extents, stage: move data extents [ 89.771735][ T5120] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5138] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5120] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] close(3 [pid 5120] <... futex resumed>) = 0 [pid 5120] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] <... close resumed>) = 0 [pid 5119] close(4) = 0 [pid 5119] close(5) = 0 [pid 5119] close(6) = -1 EBADF (Bad file descriptor) [pid 5119] close(7) = -1 EBADF (Bad file descriptor) [pid 5119] close(8) = -1 EBADF (Bad file descriptor) [pid 5119] close(9) = -1 EBADF (Bad file descriptor) [pid 5119] close(10) = -1 EBADF (Bad file descriptor) [ 89.790571][ T5120] BTRFS info (device loop0): balance: ended with status: 0 [pid 5119] close(11) = -1 EBADF (Bad file descriptor) [pid 5119] close(12) = -1 EBADF (Bad file descriptor) [pid 5119] close(13) = -1 EBADF (Bad file descriptor) [pid 5119] close(14) = -1 EBADF (Bad file descriptor) [pid 5119] close(15) = -1 EBADF (Bad file descriptor) [pid 5119] close(16) = -1 EBADF (Bad file descriptor) [pid 5119] close(17) = -1 EBADF (Bad file descriptor) [pid 5119] close(18) = -1 EBADF (Bad file descriptor) [pid 5119] close(19) = -1 EBADF (Bad file descriptor) [pid 5119] close(20) = -1 EBADF (Bad file descriptor) [pid 5119] close(21) = -1 EBADF (Bad file descriptor) [pid 5119] close(22) = -1 EBADF (Bad file descriptor) [pid 5119] close(23) = -1 EBADF (Bad file descriptor) [pid 5119] close(24) = -1 EBADF (Bad file descriptor) [pid 5119] close(25) = -1 EBADF (Bad file descriptor) [pid 5119] close(26) = -1 EBADF (Bad file descriptor) [pid 5119] close(27) = -1 EBADF (Bad file descriptor) [pid 5119] close(28) = -1 EBADF (Bad file descriptor) [pid 5119] close(29) = -1 EBADF (Bad file descriptor) [pid 5119] exit_group(0) = ? [pid 5138] <... futex resumed>) = ? [pid 5120] <... futex resumed>) = ? [pid 5138] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./2/binderfs") = 0 [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./2/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./2") = 0 [pid 5073] mkdir("./3", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5139 attached [pid 5139] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 12 [pid 5139] <... set_robust_list resumed>) = 0 [pid 5139] chdir("./3") = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5139] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5139] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5139] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5139] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5140 attached [pid 5140] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5139] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5140] set_robust_list(0x7f8785c4c9a0, 24 [pid 5139] rt_sigprocmask(SIG_SETMASK, [], [pid 5140] <... set_robust_list resumed>) = 0 [pid 5139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5140] rt_sigprocmask(SIG_SETMASK, [], [pid 5139] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5139] <... futex resumed>) = 0 [pid 5140] memfd_create("syzkaller", 0 [pid 5139] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5140] <... memfd_create resumed>) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5140] munmap(0x7f877d82c000, 138412032) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] close(3) = 0 [pid 5140] mkdir("./file0", 0777) = 0 [ 90.401161][ T5140] loop0: detected capacity change from 0 to 32768 [ 90.425499][ T5140] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5140) [ 90.442725][ T5140] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 90.452179][ T5140] BTRFS info (device loop0): force clearing of disk cache [ 90.459426][ T5140] BTRFS info (device loop0): setting nodatasum [ 90.465750][ T5140] BTRFS info (device loop0): allowing degraded mounts [ 90.472719][ T5140] BTRFS info (device loop0): enabling disk space caching [ 90.480133][ T5140] BTRFS info (device loop0): disk space caching is enabled [ 90.503300][ T5140] BTRFS info (device loop0): enabling ssd optimizations [ 90.510393][ T5140] BTRFS info (device loop0): auto enabling async discard [ 90.515506][ T5074] Bluetooth: hci0: command 0x041b tx timeout [ 90.525061][ T5140] BTRFS info (device loop0): rebuilding free space tree [ 90.536971][ T5140] BTRFS info (device loop0): disabling free space tree [ 90.543858][ T5140] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5140] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5140] chdir("./file0") = 0 [pid 5140] ioctl(4, LOOP_CLR_FD) = 0 [pid 5140] close(4) = 0 [pid 5140] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5139] <... futex resumed>) = 0 [pid 5140] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 1 [ 90.553590][ T5140] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.566856][ T5140] BTRFS info (device loop0): checking UUID tree [pid 5140] open("./file0", O_RDONLY) = 4 [pid 5139] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5139] <... futex resumed>) = 0 [pid 5140] <... ioctl resumed>) = 0 [pid 5139] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 1 [pid 5140] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5139] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5139] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5139] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5139] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5139] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5158 attached => {parent_tid=[14]}, 88) = 14 [pid 5158] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5158] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5139] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5158] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 1 [pid 5158] open("./file0", O_RDONLY) = 5 [pid 5139] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] <... futex resumed>) = 0 [pid 5139] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5139] <... futex resumed>) = 0 [ 90.664856][ T5140] BTRFS info (device loop0): balance: start -d -m [ 90.674235][ T5140] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 90.698547][ T5140] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5139] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5158] <... ioctl resumed>) = 0 [pid 5158] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.800096][ T5140] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5158] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5140] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] close(3 [pid 5140] <... futex resumed>) = 0 [pid 5139] <... close resumed>) = 0 [pid 5140] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] close(4) = 0 [pid 5139] close(5) = 0 [pid 5139] close(6) = -1 EBADF (Bad file descriptor) [pid 5139] close(7) = -1 EBADF (Bad file descriptor) [pid 5139] close(8) = -1 EBADF (Bad file descriptor) [pid 5139] close(9) = -1 EBADF (Bad file descriptor) [pid 5139] close(10) = -1 EBADF (Bad file descriptor) [ 90.869813][ T5140] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 90.889077][ T5140] BTRFS info (device loop0): balance: ended with status: 0 [pid 5139] close(11) = -1 EBADF (Bad file descriptor) [pid 5139] close(12) = -1 EBADF (Bad file descriptor) [pid 5139] close(13) = -1 EBADF (Bad file descriptor) [pid 5139] close(14) = -1 EBADF (Bad file descriptor) [pid 5139] close(15) = -1 EBADF (Bad file descriptor) [pid 5139] close(16) = -1 EBADF (Bad file descriptor) [pid 5139] close(17) = -1 EBADF (Bad file descriptor) [pid 5139] close(18) = -1 EBADF (Bad file descriptor) [pid 5139] close(19) = -1 EBADF (Bad file descriptor) [pid 5139] close(20) = -1 EBADF (Bad file descriptor) [pid 5139] close(21) = -1 EBADF (Bad file descriptor) [pid 5139] close(22) = -1 EBADF (Bad file descriptor) [pid 5139] close(23) = -1 EBADF (Bad file descriptor) [pid 5139] close(24) = -1 EBADF (Bad file descriptor) [pid 5139] close(25) = -1 EBADF (Bad file descriptor) [pid 5139] close(26) = -1 EBADF (Bad file descriptor) [pid 5139] close(27) = -1 EBADF (Bad file descriptor) [pid 5139] close(28) = -1 EBADF (Bad file descriptor) [pid 5139] close(29) = -1 EBADF (Bad file descriptor) [pid 5139] exit_group(0 [pid 5158] <... futex resumed>) = ? [pid 5140] <... futex resumed>) = ? [pid 5139] <... exit_group resumed>) = ? [pid 5140] +++ exited with 0 +++ [pid 5158] +++ exited with 0 +++ [pid 5139] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./3/binderfs") = 0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./3/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./3") = 0 [pid 5073] mkdir("./4", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5159 attached , child_tidptr=0x5555570a9690) = 15 [pid 5159] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5159] chdir("./4") = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5159] close(3) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5159] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5159] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5160 attached [pid 5160] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5159] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5160] <... rseq resumed>) = 0 [pid 5160] set_robust_list(0x7f8785c4c9a0, 24 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5160] <... set_robust_list resumed>) = 0 [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5160] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5159] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5160] munmap(0x7f877d82c000, 138412032) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5160] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5160] close(3) = 0 [pid 5160] mkdir("./file0", 0777) = 0 [ 91.510741][ T5160] loop0: detected capacity change from 0 to 32768 [ 91.535171][ T5160] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5160) [ 91.552439][ T5160] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 91.561785][ T5160] BTRFS info (device loop0): force clearing of disk cache [ 91.568971][ T5160] BTRFS info (device loop0): setting nodatasum [ 91.575195][ T5160] BTRFS info (device loop0): allowing degraded mounts [ 91.581970][ T5160] BTRFS info (device loop0): enabling disk space caching [ 91.589108][ T5160] BTRFS info (device loop0): disk space caching is enabled [ 91.610604][ T5160] BTRFS info (device loop0): enabling ssd optimizations [ 91.617658][ T5160] BTRFS info (device loop0): auto enabling async discard [ 91.625823][ T5160] BTRFS info (device loop0): rebuilding free space tree [ 91.638007][ T5160] BTRFS info (device loop0): disabling free space tree [ 91.645113][ T5160] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5160] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./file0") = 0 [pid 5160] ioctl(4, LOOP_CLR_FD) = 0 [pid 5160] close(4) = 0 [ 91.654804][ T5160] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.668471][ T5160] BTRFS info (device loop0): checking UUID tree [pid 5160] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5160] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5160] open("./file0", O_RDONLY [pid 5159] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... open resumed>) = 4 [pid 5160] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5159] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5159] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... ioctl resumed>) = 0 [pid 5160] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5159] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 91.733535][ T5160] BTRFS info (device loop0): balance: start -d -m [ 91.742256][ T5160] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5159] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5159] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5159] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5178 attached => {parent_tid=[17]}, 88) = 17 [pid 5178] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5178] <... rseq resumed>) = 0 [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5178] open("./file0", O_RDONLY) = 5 [pid 5178] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5178] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] <... futex resumed>) = 0 [pid 5159] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 91.776458][ T5160] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5178] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] close(3) = 0 [pid 5159] close(4) = 0 [pid 5159] close(5) = 0 [pid 5159] close(6) = -1 EBADF (Bad file descriptor) [pid 5159] close(7) = -1 EBADF (Bad file descriptor) [pid 5159] close(8) = -1 EBADF (Bad file descriptor) [pid 5159] close(9) = -1 EBADF (Bad file descriptor) [pid 5159] close(10) = -1 EBADF (Bad file descriptor) [pid 5159] close(11) = -1 EBADF (Bad file descriptor) [pid 5159] close(12) = -1 EBADF (Bad file descriptor) [pid 5159] close(13) = -1 EBADF (Bad file descriptor) [pid 5159] close(14) = -1 EBADF (Bad file descriptor) [pid 5159] close(15) = -1 EBADF (Bad file descriptor) [pid 5159] close(16) = -1 EBADF (Bad file descriptor) [pid 5159] close(17) = -1 EBADF (Bad file descriptor) [pid 5159] close(18) = -1 EBADF (Bad file descriptor) [pid 5159] close(19) = -1 EBADF (Bad file descriptor) [pid 5159] close(20) = -1 EBADF (Bad file descriptor) [pid 5159] close(21) = -1 EBADF (Bad file descriptor) [pid 5159] close(22) = -1 EBADF (Bad file descriptor) [pid 5159] close(23) = -1 EBADF (Bad file descriptor) [pid 5159] close(24) = -1 EBADF (Bad file descriptor) [pid 5159] close(25) = -1 EBADF (Bad file descriptor) [pid 5159] close(26) = -1 EBADF (Bad file descriptor) [pid 5159] close(27) = -1 EBADF (Bad file descriptor) [pid 5159] close(28) = -1 EBADF (Bad file descriptor) [pid 5159] close(29) = -1 EBADF (Bad file descriptor) [pid 5159] exit_group(0) = ? [pid 5178] <... ioctl resumed>) = ? [pid 5178] +++ exited with 0 +++ [pid 5160] <... ioctl resumed> ) = ? [pid 5160] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 92.052529][ T5178] BTRFS warning (device loop0): failed to trim 1 block group(s), last error -512 [ 92.068027][ T5160] BTRFS info (device loop0): balance: canceled [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./4/binderfs") = 0 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./4/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./4") = 0 [pid 5073] mkdir("./5", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5179 attached , child_tidptr=0x5555570a9690) = 18 [pid 5179] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5179] chdir("./5") = 0 [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] setpgid(0, 0) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5179] write(3, "1000", 4) = 4 [pid 5179] close(3) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5179] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5179] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5180 attached [pid 5180] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5179] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5180] <... rseq resumed>) = 0 [pid 5179] rt_sigprocmask(SIG_SETMASK, [], [pid 5180] set_robust_list(0x7f8785c4c9a0, 24 [pid 5179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5180] rt_sigprocmask(SIG_SETMASK, [], [pid 5179] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5179] <... futex resumed>) = 0 [pid 5180] memfd_create("syzkaller", 0 [pid 5179] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5180] <... memfd_create resumed>) = 3 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5180] munmap(0x7f877d82c000, 138412032) = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5180] close(3) = 0 [pid 5180] mkdir("./file0", 0777) = 0 [ 92.589871][ T5180] loop0: detected capacity change from 0 to 32768 [ 92.596504][ T5074] Bluetooth: hci0: command 0x040f tx timeout [ 92.625156][ T5180] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5180) [ 92.641627][ T5180] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 92.650893][ T5180] BTRFS info (device loop0): force clearing of disk cache [ 92.658025][ T5180] BTRFS info (device loop0): setting nodatasum [ 92.664244][ T5180] BTRFS info (device loop0): allowing degraded mounts [ 92.671023][ T5180] BTRFS info (device loop0): enabling disk space caching [ 92.678123][ T5180] BTRFS info (device loop0): disk space caching is enabled [ 92.700246][ T5180] BTRFS info (device loop0): enabling ssd optimizations [ 92.707273][ T5180] BTRFS info (device loop0): auto enabling async discard [ 92.715549][ T5180] BTRFS info (device loop0): rebuilding free space tree [ 92.728305][ T5180] BTRFS info (device loop0): disabling free space tree [ 92.735227][ T5180] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5180] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5180] chdir("./file0") = 0 [pid 5180] ioctl(4, LOOP_CLR_FD) = 0 [pid 5180] close(4) = 0 [pid 5180] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5180] <... futex resumed>) = 1 [pid 5179] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 92.744920][ T5180] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.757838][ T5180] BTRFS info (device loop0): checking UUID tree [pid 5180] open("./file0", O_RDONLY) = 4 [pid 5180] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = 1 [pid 5179] <... futex resumed>) = 0 [pid 5180] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5179] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... ioctl resumed>) = 0 [pid 5180] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5180] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 1 [pid 5180] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 92.850563][ T5180] BTRFS info (device loop0): balance: start -d -m [ 92.861382][ T5180] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5179] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5179] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5179] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[20]}, 88) = 20 [pid 5179] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5198 attached NULL, 8) = 0 [pid 5198] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5179] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] set_robust_list(0x7f8785c2b9a0, 24 [pid 5179] <... futex resumed>) = 0 [pid 5198] <... set_robust_list resumed>) = 0 [pid 5179] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5198] open("./file0", O_RDONLY) = 5 [pid 5198] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] <... futex resumed>) = 0 [pid 5179] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 1 [pid 5198] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 92.891016][ T5180] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5179] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5198] <... ioctl resumed>) = 0 [pid 5198] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.044159][ T5180] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 93.068647][ T5180] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5198] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5180] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5180] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] close(3) = 0 [pid 5179] close(4) = 0 [pid 5179] close(5) = 0 [ 93.088366][ T5180] BTRFS info (device loop0): balance: ended with status: 0 [pid 5179] close(6) = -1 EBADF (Bad file descriptor) [pid 5179] close(7) = -1 EBADF (Bad file descriptor) [pid 5179] close(8) = -1 EBADF (Bad file descriptor) [pid 5179] close(9) = -1 EBADF (Bad file descriptor) [pid 5179] close(10) = -1 EBADF (Bad file descriptor) [pid 5179] close(11) = -1 EBADF (Bad file descriptor) [pid 5179] close(12) = -1 EBADF (Bad file descriptor) [pid 5179] close(13) = -1 EBADF (Bad file descriptor) [pid 5179] close(14) = -1 EBADF (Bad file descriptor) [pid 5179] close(15) = -1 EBADF (Bad file descriptor) [pid 5179] close(16) = -1 EBADF (Bad file descriptor) [pid 5179] close(17) = -1 EBADF (Bad file descriptor) [pid 5179] close(18) = -1 EBADF (Bad file descriptor) [pid 5179] close(19) = -1 EBADF (Bad file descriptor) [pid 5179] close(20) = -1 EBADF (Bad file descriptor) [pid 5179] close(21) = -1 EBADF (Bad file descriptor) [pid 5179] close(22) = -1 EBADF (Bad file descriptor) [pid 5179] close(23) = -1 EBADF (Bad file descriptor) [pid 5179] close(24) = -1 EBADF (Bad file descriptor) [pid 5179] close(25) = -1 EBADF (Bad file descriptor) [pid 5179] close(26) = -1 EBADF (Bad file descriptor) [pid 5179] close(27) = -1 EBADF (Bad file descriptor) [pid 5179] close(28) = -1 EBADF (Bad file descriptor) [pid 5179] close(29) = -1 EBADF (Bad file descriptor) [pid 5179] exit_group(0 [pid 5198] <... futex resumed>) = ? [pid 5180] <... futex resumed>) = ? [pid 5179] <... exit_group resumed>) = ? [pid 5198] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5179] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./5/binderfs") = 0 [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./5/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./5") = 0 [pid 5073] mkdir("./6", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5199 attached [pid 5199] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 21 [pid 5199] chdir("./6") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5199] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5200 attached [pid 5200] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5199] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5200] set_robust_list(0x7f8785c4c9a0, 24 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], [pid 5200] <... set_robust_list resumed>) = 0 [pid 5200] rt_sigprocmask(SIG_SETMASK, [], [pid 5199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5199] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] memfd_create("syzkaller", 0 [pid 5199] <... futex resumed>) = 0 [pid 5200] <... memfd_create resumed>) = 3 [pid 5199] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5200] munmap(0x7f877d82c000, 138412032) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] mkdir("./file0", 0777) = 0 [ 93.780966][ T5200] loop0: detected capacity change from 0 to 32768 [ 93.805375][ T5200] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5200) [ 93.821986][ T5200] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 93.831304][ T5200] BTRFS info (device loop0): force clearing of disk cache [ 93.838451][ T5200] BTRFS info (device loop0): setting nodatasum [ 93.844665][ T5200] BTRFS info (device loop0): allowing degraded mounts [ 93.851432][ T5200] BTRFS info (device loop0): enabling disk space caching [ 93.858483][ T5200] BTRFS info (device loop0): disk space caching is enabled [ 93.880106][ T5200] BTRFS info (device loop0): enabling ssd optimizations [ 93.887099][ T5200] BTRFS info (device loop0): auto enabling async discard [ 93.896257][ T5200] BTRFS info (device loop0): rebuilding free space tree [ 93.908594][ T5200] BTRFS info (device loop0): disabling free space tree [ 93.915735][ T5200] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5200] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5200] chdir("./file0") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [pid 5200] close(4) = 0 [pid 5200] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5200] open("./file0", O_RDONLY [pid 5199] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = 4 [pid 5200] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] <... futex resumed>) = 0 [pid 5200] <... futex resumed>) = 1 [pid 5199] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [ 93.925537][ T5200] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.939084][ T5200] BTRFS info (device loop0): checking UUID tree [pid 5200] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5200] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5199] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5199] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5199] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[23]}, 88) = 23 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5199] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5199] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5218 attached [pid 5218] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5218] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] open("./file0", O_RDONLY) = 5 [pid 5218] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5199] <... futex resumed>) = 0 [pid 5199] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5199] <... futex resumed>) = 0 [ 94.016295][ T5200] BTRFS info (device loop0): balance: start -d -m [ 94.024629][ T5200] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 94.051384][ T5200] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5199] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 94.154988][ T5200] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5218] <... ioctl resumed>) = 0 [pid 5218] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5200] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5200] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5200] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] close(3) = 0 [pid 5199] close(4) = 0 [pid 5199] close(5) = 0 [pid 5199] close(6) = -1 EBADF (Bad file descriptor) [pid 5199] close(7) = -1 EBADF (Bad file descriptor) [pid 5199] close(8) = -1 EBADF (Bad file descriptor) [pid 5199] close(9) = -1 EBADF (Bad file descriptor) [pid 5199] close(10) = -1 EBADF (Bad file descriptor) [pid 5199] close(11) = -1 EBADF (Bad file descriptor) [pid 5199] close(12) = -1 EBADF (Bad file descriptor) [pid 5199] close(13) = -1 EBADF (Bad file descriptor) [ 94.227002][ T5200] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 94.250505][ T5200] BTRFS info (device loop0): balance: ended with status: 0 [pid 5199] close(14) = -1 EBADF (Bad file descriptor) [pid 5199] close(15) = -1 EBADF (Bad file descriptor) [pid 5199] close(16) = -1 EBADF (Bad file descriptor) [pid 5199] close(17) = -1 EBADF (Bad file descriptor) [pid 5199] close(18) = -1 EBADF (Bad file descriptor) [pid 5199] close(19) = -1 EBADF (Bad file descriptor) [pid 5199] close(20) = -1 EBADF (Bad file descriptor) [pid 5199] close(21) = -1 EBADF (Bad file descriptor) [pid 5199] close(22) = -1 EBADF (Bad file descriptor) [pid 5199] close(23) = -1 EBADF (Bad file descriptor) [pid 5199] close(24) = -1 EBADF (Bad file descriptor) [pid 5199] close(25) = -1 EBADF (Bad file descriptor) [pid 5199] close(26) = -1 EBADF (Bad file descriptor) [pid 5199] close(27) = -1 EBADF (Bad file descriptor) [pid 5199] close(28) = -1 EBADF (Bad file descriptor) [pid 5199] close(29) = -1 EBADF (Bad file descriptor) [pid 5199] exit_group(0) = ? [pid 5218] <... futex resumed>) = ? [pid 5200] <... futex resumed>) = ? [pid 5218] +++ exited with 0 +++ [pid 5200] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./6/binderfs") = 0 [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./6/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./6") = 0 [pid 5073] mkdir("./7", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5219 attached [pid 5219] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 24 [pid 5219] <... set_robust_list resumed>) = 0 [pid 5219] chdir("./7") = 0 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5219] setpgid(0, 0) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5219] write(3, "1000", 4) = 4 [pid 5219] close(3) = 0 [pid 5219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5219] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5219] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5220 attached [pid 5220] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5219] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5220] set_robust_list(0x7f8785c4c9a0, 24 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], [pid 5220] <... set_robust_list resumed>) = 0 [pid 5219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5219] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] memfd_create("syzkaller", 0 [pid 5219] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5220] <... memfd_create resumed>) = 3 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [ 94.673998][ T5074] Bluetooth: hci0: command 0x0419 tx timeout [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5220] munmap(0x7f877d82c000, 138412032) = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5220] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5220] close(3) = 0 [pid 5220] mkdir("./file0", 0777) = 0 [ 94.921088][ T5220] loop0: detected capacity change from 0 to 32768 [ 94.935284][ T5220] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5220) [ 94.951857][ T5220] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 94.961158][ T5220] BTRFS info (device loop0): force clearing of disk cache [ 94.968297][ T5220] BTRFS info (device loop0): setting nodatasum [ 94.974494][ T5220] BTRFS info (device loop0): allowing degraded mounts [ 94.981260][ T5220] BTRFS info (device loop0): enabling disk space caching [ 94.988410][ T5220] BTRFS info (device loop0): disk space caching is enabled [ 95.011271][ T5220] BTRFS info (device loop0): enabling ssd optimizations [ 95.018251][ T5220] BTRFS info (device loop0): auto enabling async discard [ 95.026290][ T5220] BTRFS info (device loop0): rebuilding free space tree [ 95.038412][ T5220] BTRFS info (device loop0): disabling free space tree [ 95.045732][ T5220] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.055414][ T5220] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5220] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5220] chdir("./file0") = 0 [pid 5220] ioctl(4, LOOP_CLR_FD) = 0 [pid 5220] close(4) = 0 [pid 5220] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 1 [pid 5219] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] open("./file0", O_RDONLY [pid 5219] <... futex resumed>) = 0 [pid 5219] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... open resumed>) = 4 [ 95.068656][ T5220] BTRFS info (device loop0): checking UUID tree [pid 5220] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5220] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] <... futex resumed>) = 0 [pid 5219] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... futex resumed>) = 0 [pid 5220] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5220] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5219] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 95.136730][ T5220] BTRFS info (device loop0): balance: start -d -m [ 95.147671][ T5220] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5220] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5219] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5219] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5219] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5238 attached [pid 5238] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5238] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5238] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5219] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5238] open("./file0", O_RDONLY [pid 5219] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] <... open resumed>) = 5 [pid 5238] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5238] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] <... futex resumed>) = 0 [pid 5238] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 95.178203][ T5220] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5219] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5238] <... ioctl resumed>) = 0 [pid 5238] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.345861][ T5220] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 95.370183][ T5220] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5238] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5220] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] close(3) = 0 [pid 5219] close(4) = 0 [pid 5219] close(5) = 0 [ 95.390192][ T5220] BTRFS info (device loop0): balance: ended with status: 0 [pid 5219] close(6) = -1 EBADF (Bad file descriptor) [pid 5219] close(7) = -1 EBADF (Bad file descriptor) [pid 5219] close(8) = -1 EBADF (Bad file descriptor) [pid 5219] close(9) = -1 EBADF (Bad file descriptor) [pid 5219] close(10) = -1 EBADF (Bad file descriptor) [pid 5219] close(11) = -1 EBADF (Bad file descriptor) [pid 5219] close(12) = -1 EBADF (Bad file descriptor) [pid 5219] close(13) = -1 EBADF (Bad file descriptor) [pid 5219] close(14) = -1 EBADF (Bad file descriptor) [pid 5219] close(15) = -1 EBADF (Bad file descriptor) [pid 5219] close(16) = -1 EBADF (Bad file descriptor) [pid 5219] close(17) = -1 EBADF (Bad file descriptor) [pid 5219] close(18) = -1 EBADF (Bad file descriptor) [pid 5219] close(19) = -1 EBADF (Bad file descriptor) [pid 5219] close(20) = -1 EBADF (Bad file descriptor) [pid 5219] close(21) = -1 EBADF (Bad file descriptor) [pid 5219] close(22) = -1 EBADF (Bad file descriptor) [pid 5219] close(23) = -1 EBADF (Bad file descriptor) [pid 5219] close(24) = -1 EBADF (Bad file descriptor) [pid 5219] close(25) = -1 EBADF (Bad file descriptor) [pid 5219] close(26) = -1 EBADF (Bad file descriptor) [pid 5219] close(27) = -1 EBADF (Bad file descriptor) [pid 5219] close(28) = -1 EBADF (Bad file descriptor) [pid 5219] close(29) = -1 EBADF (Bad file descriptor) [pid 5219] exit_group(0 [pid 5238] <... futex resumed>) = ? [pid 5220] <... futex resumed>) = ? [pid 5219] <... exit_group resumed>) = ? [pid 5238] +++ exited with 0 +++ [pid 5220] +++ exited with 0 +++ [pid 5219] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=46 /* 0.46 s */} --- [pid 5073] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./7/binderfs") = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./7/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./7") = 0 [pid 5073] mkdir("./8", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5239 attached , child_tidptr=0x5555570a9690) = 27 [pid 5239] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5239] chdir("./8") = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5239] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5239] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5240 attached [pid 5240] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5239] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5240] <... rseq resumed>) = 0 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] set_robust_list(0x7f8785c4c9a0, 24 [pid 5239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] <... set_robust_list resumed>) = 0 [pid 5239] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5240] memfd_create("syzkaller", 0 [pid 5239] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] <... memfd_create resumed>) = 3 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5240] munmap(0x7f877d82c000, 138412032) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5240] close(3) = 0 [pid 5240] mkdir("./file0", 0777) = 0 [ 96.010774][ T5240] loop0: detected capacity change from 0 to 32768 [ 96.035026][ T5240] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5240) [ 96.050825][ T5240] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.060271][ T5240] BTRFS info (device loop0): force clearing of disk cache [ 96.067450][ T5240] BTRFS info (device loop0): setting nodatasum [ 96.073784][ T5240] BTRFS info (device loop0): allowing degraded mounts [ 96.080877][ T5240] BTRFS info (device loop0): enabling disk space caching [ 96.087947][ T5240] BTRFS info (device loop0): disk space caching is enabled [ 96.109438][ T5240] BTRFS info (device loop0): enabling ssd optimizations [ 96.116434][ T5240] BTRFS info (device loop0): auto enabling async discard [ 96.125316][ T5240] BTRFS info (device loop0): rebuilding free space tree [ 96.137275][ T5240] BTRFS info (device loop0): disabling free space tree [ 96.144247][ T5240] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5240] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] chdir("./file0") = 0 [pid 5240] ioctl(4, LOOP_CLR_FD) = 0 [pid 5240] close(4) = 0 [pid 5240] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5240] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5239] <... futex resumed>) = 0 [pid 5240] open("./file0", O_RDONLY [pid 5239] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... open resumed>) = 4 [ 96.154228][ T5240] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.168218][ T5240] BTRFS info (device loop0): checking UUID tree [pid 5240] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5239] <... futex resumed>) = 0 [pid 5240] <... ioctl resumed>) = 0 [pid 5239] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5240] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5239] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5239] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5239] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5258 attached [pid 5258] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5258] set_robust_list(0x7f8785c2b9a0, 24) = 0 [ 96.235292][ T5240] BTRFS info (device loop0): balance: start -d -m [ 96.245807][ T5240] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 96.271910][ T5240] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5239] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5239] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5258] open("./file0", O_RDONLY) = 5 [pid 5258] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5258] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 1 [pid 5258] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 96.323006][ T5240] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5239] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5258] <... ioctl resumed>) = 0 [pid 5258] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5240] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] close(3) = 0 [pid 5239] close(4) = 0 [pid 5239] close(5) = 0 [pid 5239] close(6) = -1 EBADF (Bad file descriptor) [pid 5239] close(7) = -1 EBADF (Bad file descriptor) [pid 5239] close(8) = -1 EBADF (Bad file descriptor) [pid 5239] close(9) = -1 EBADF (Bad file descriptor) [pid 5239] close(10) = -1 EBADF (Bad file descriptor) [pid 5239] close(11) = -1 EBADF (Bad file descriptor) [pid 5239] close(12) = -1 EBADF (Bad file descriptor) [pid 5239] close(13) = -1 EBADF (Bad file descriptor) [ 96.456682][ T5240] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 96.476717][ T5240] BTRFS info (device loop0): balance: ended with status: 0 [pid 5239] close(14) = -1 EBADF (Bad file descriptor) [pid 5239] close(15) = -1 EBADF (Bad file descriptor) [pid 5239] close(16) = -1 EBADF (Bad file descriptor) [pid 5239] close(17) = -1 EBADF (Bad file descriptor) [pid 5239] close(18) = -1 EBADF (Bad file descriptor) [pid 5239] close(19) = -1 EBADF (Bad file descriptor) [pid 5239] close(20) = -1 EBADF (Bad file descriptor) [pid 5239] close(21) = -1 EBADF (Bad file descriptor) [pid 5239] close(22) = -1 EBADF (Bad file descriptor) [pid 5239] close(23) = -1 EBADF (Bad file descriptor) [pid 5239] close(24) = -1 EBADF (Bad file descriptor) [pid 5239] close(25) = -1 EBADF (Bad file descriptor) [pid 5239] close(26) = -1 EBADF (Bad file descriptor) [pid 5239] close(27) = -1 EBADF (Bad file descriptor) [pid 5239] close(28) = -1 EBADF (Bad file descriptor) [pid 5239] close(29) = -1 EBADF (Bad file descriptor) [pid 5239] exit_group(0 [pid 5258] <... futex resumed>) = ? [pid 5240] <... futex resumed>) = ? [pid 5239] <... exit_group resumed>) = ? [pid 5258] +++ exited with 0 +++ [pid 5240] +++ exited with 0 +++ [pid 5239] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=47 /* 0.47 s */} --- [pid 5073] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./8/binderfs") = 0 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./8/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./8") = 0 [pid 5073] mkdir("./9", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5259 attached , child_tidptr=0x5555570a9690) = 30 [pid 5259] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5259] chdir("./9") = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5259] close(3) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5259] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5259] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5260 attached [pid 5260] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5260] set_robust_list(0x7f8785c4c9a0, 24 [pid 5259] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5260] <... set_robust_list resumed>) = 0 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5260] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] memfd_create("syzkaller", 0 [pid 5259] <... futex resumed>) = 0 [pid 5260] <... memfd_create resumed>) = 3 [pid 5259] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5260] munmap(0x7f877d82c000, 138412032) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5260] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5260] close(3) = 0 [pid 5260] mkdir("./file0", 0777) = 0 [ 97.167297][ T5260] loop0: detected capacity change from 0 to 32768 [ 97.191951][ T5260] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5260) [ 97.207724][ T5260] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 97.217008][ T5260] BTRFS info (device loop0): force clearing of disk cache [ 97.224248][ T5260] BTRFS info (device loop0): setting nodatasum [ 97.230442][ T5260] BTRFS info (device loop0): allowing degraded mounts [ 97.237527][ T5260] BTRFS info (device loop0): enabling disk space caching [ 97.244627][ T5260] BTRFS info (device loop0): disk space caching is enabled [ 97.266282][ T5260] BTRFS info (device loop0): enabling ssd optimizations [ 97.273245][ T5260] BTRFS info (device loop0): auto enabling async discard [ 97.281979][ T5260] BTRFS info (device loop0): rebuilding free space tree [ 97.293711][ T5260] BTRFS info (device loop0): disabling free space tree [ 97.300670][ T5260] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5260] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5260] chdir("./file0") = 0 [pid 5260] ioctl(4, LOOP_CLR_FD) = 0 [pid 5260] close(4) = 0 [pid 5260] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] open("./file0", O_RDONLY [pid 5259] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... open resumed>) = 4 [pid 5260] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [ 97.310366][ T5260] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.324212][ T5260] BTRFS info (device loop0): checking UUID tree [pid 5260] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5260] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5260] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... futex resumed>) = 0 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5259] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5259] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [ 97.398286][ T5260] BTRFS info (device loop0): balance: start -d -m [ 97.406913][ T5260] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 97.433101][ T5260] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5278 attached => {parent_tid=[32]}, 88) = 32 [pid 5278] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] <... rseq resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5278] set_robust_list(0x7f8785c2b9a0, 24 [pid 5259] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... set_robust_list resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5278] open("./file0", O_RDONLY) = 5 [pid 5278] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5278] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... futex resumed>) = 0 [pid 5278] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5259] <... futex resumed>) = 1 [pid 5259] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 97.524682][ T5260] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5278] <... ioctl resumed>) = 0 [pid 5278] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5260] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] close(3) = 0 [pid 5259] close(4 [pid 5260] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... close resumed>) = 0 [pid 5259] close(5) = 0 [pid 5259] close(6) = -1 EBADF (Bad file descriptor) [pid 5259] close(7) = -1 EBADF (Bad file descriptor) [pid 5259] close(8) = -1 EBADF (Bad file descriptor) [pid 5259] close(9) = -1 EBADF (Bad file descriptor) [pid 5259] close(10) = -1 EBADF (Bad file descriptor) [ 97.612087][ T5260] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 97.631929][ T5260] BTRFS info (device loop0): balance: ended with status: 0 [pid 5259] close(11) = -1 EBADF (Bad file descriptor) [pid 5259] close(12) = -1 EBADF (Bad file descriptor) [pid 5259] close(13) = -1 EBADF (Bad file descriptor) [pid 5259] close(14) = -1 EBADF (Bad file descriptor) [pid 5259] close(15) = -1 EBADF (Bad file descriptor) [pid 5259] close(16) = -1 EBADF (Bad file descriptor) [pid 5259] close(17) = -1 EBADF (Bad file descriptor) [pid 5259] close(18) = -1 EBADF (Bad file descriptor) [pid 5259] close(19) = -1 EBADF (Bad file descriptor) [pid 5259] close(20) = -1 EBADF (Bad file descriptor) [pid 5259] close(21) = -1 EBADF (Bad file descriptor) [pid 5259] close(22) = -1 EBADF (Bad file descriptor) [pid 5259] close(23) = -1 EBADF (Bad file descriptor) [pid 5259] close(24) = -1 EBADF (Bad file descriptor) [pid 5259] close(25) = -1 EBADF (Bad file descriptor) [pid 5259] close(26) = -1 EBADF (Bad file descriptor) [pid 5259] close(27) = -1 EBADF (Bad file descriptor) [pid 5259] close(28) = -1 EBADF (Bad file descriptor) [pid 5259] close(29) = -1 EBADF (Bad file descriptor) [pid 5259] exit_group(0 [pid 5260] <... futex resumed>) = ? [pid 5278] <... futex resumed>) = ? [pid 5260] +++ exited with 0 +++ [pid 5259] <... exit_group resumed>) = ? [pid 5278] +++ exited with 0 +++ [pid 5259] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./9/binderfs") = 0 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./9/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./9") = 0 [pid 5073] mkdir("./10", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5279 attached , child_tidptr=0x5555570a9690) = 33 [pid 5279] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5279] chdir("./10") = 0 [pid 5279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5279] setpgid(0, 0) = 0 [pid 5279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5279] write(3, "1000", 4) = 4 [pid 5279] close(3) = 0 [pid 5279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5279] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5279] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5280 attached [pid 5280] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5279] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5280] <... rseq resumed>) = 0 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] set_robust_list(0x7f8785c4c9a0, 24 [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5280] <... set_robust_list resumed>) = 0 [pid 5279] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] rt_sigprocmask(SIG_SETMASK, [], [pid 5279] <... futex resumed>) = 0 [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5280] memfd_create("syzkaller", 0) = 3 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5280] munmap(0x7f877d82c000, 138412032) = 0 [pid 5280] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5280] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5280] close(3) = 0 [pid 5280] mkdir("./file0", 0777) = 0 [ 98.241688][ T5280] loop0: detected capacity change from 0 to 32768 [ 98.256771][ T5280] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5280) [ 98.273073][ T5280] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.282349][ T5280] BTRFS info (device loop0): force clearing of disk cache [ 98.289489][ T5280] BTRFS info (device loop0): setting nodatasum [ 98.295697][ T5280] BTRFS info (device loop0): allowing degraded mounts [ 98.302464][ T5280] BTRFS info (device loop0): enabling disk space caching [ 98.309532][ T5280] BTRFS info (device loop0): disk space caching is enabled [ 98.330573][ T5280] BTRFS info (device loop0): enabling ssd optimizations [ 98.337624][ T5280] BTRFS info (device loop0): auto enabling async discard [ 98.345602][ T5280] BTRFS info (device loop0): rebuilding free space tree [ 98.358857][ T5280] BTRFS info (device loop0): disabling free space tree [ 98.365826][ T5280] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.375477][ T5280] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5280] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5280] chdir("./file0") = 0 [pid 5280] ioctl(4, LOOP_CLR_FD) = 0 [pid 5280] close(4) = 0 [pid 5280] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] <... futex resumed>) = 0 [ 98.388409][ T5280] BTRFS info (device loop0): checking UUID tree [pid 5280] open("./file0", O_RDONLY) = 4 [pid 5280] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5279] <... futex resumed>) = 0 [pid 5280] <... ioctl resumed>) = 0 [pid 5279] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5279] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5279] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5279] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[35]}, 88) = 35 ./strace-static-x86_64: Process 5298 attached [pid 5298] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5298] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5279] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] open("./file0", O_RDONLY [pid 5279] <... futex resumed>) = 0 [pid 5298] <... open resumed>) = 5 [pid 5298] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5279] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] <... futex resumed>) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5298] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 98.504546][ T5280] BTRFS info (device loop0): balance: start -d -m [ 98.516825][ T5280] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 98.540836][ T5280] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5279] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5298] <... ioctl resumed>) = 0 [ 98.620157][ T5280] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5298] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5280] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] close(3 [pid 5280] <... futex resumed>) = 0 [pid 5279] <... close resumed>) = 0 [pid 5280] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] close(4) = 0 [pid 5279] close(5) = 0 [pid 5279] close(6) = -1 EBADF (Bad file descriptor) [pid 5279] close(7) = -1 EBADF (Bad file descriptor) [pid 5279] close(8) = -1 EBADF (Bad file descriptor) [pid 5279] close(9) = -1 EBADF (Bad file descriptor) [pid 5279] close(10) = -1 EBADF (Bad file descriptor) [pid 5279] close(11) = -1 EBADF (Bad file descriptor) [pid 5279] close(12) = -1 EBADF (Bad file descriptor) [pid 5279] close(13) = -1 EBADF (Bad file descriptor) [pid 5279] close(14) = -1 EBADF (Bad file descriptor) [ 98.685499][ T5280] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 98.707256][ T5280] BTRFS info (device loop0): balance: ended with status: 0 [pid 5279] close(15) = -1 EBADF (Bad file descriptor) [pid 5279] close(16) = -1 EBADF (Bad file descriptor) [pid 5279] close(17) = -1 EBADF (Bad file descriptor) [pid 5279] close(18) = -1 EBADF (Bad file descriptor) [pid 5279] close(19) = -1 EBADF (Bad file descriptor) [pid 5279] close(20) = -1 EBADF (Bad file descriptor) [pid 5279] close(21) = -1 EBADF (Bad file descriptor) [pid 5279] close(22) = -1 EBADF (Bad file descriptor) [pid 5279] close(23) = -1 EBADF (Bad file descriptor) [pid 5279] close(24) = -1 EBADF (Bad file descriptor) [pid 5279] close(25) = -1 EBADF (Bad file descriptor) [pid 5279] close(26) = -1 EBADF (Bad file descriptor) [pid 5279] close(27) = -1 EBADF (Bad file descriptor) [pid 5279] close(28) = -1 EBADF (Bad file descriptor) [pid 5279] close(29) = -1 EBADF (Bad file descriptor) [pid 5279] exit_group(0 [pid 5298] <... futex resumed>) = ? [pid 5280] <... futex resumed>) = ? [pid 5298] +++ exited with 0 +++ [pid 5280] +++ exited with 0 +++ [pid 5279] <... exit_group resumed>) = ? [pid 5279] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./10/binderfs") = 0 [pid 5073] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./10/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./10") = 0 [pid 5073] mkdir("./11", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5299 attached , child_tidptr=0x5555570a9690) = 36 [pid 5299] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5299] chdir("./11") = 0 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5299] setpgid(0, 0) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5299] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5299] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5300 attached [pid 5300] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5299] <... clone3 resumed> => {parent_tid=[37]}, 88) = 37 [pid 5300] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], [pid 5300] rt_sigprocmask(SIG_SETMASK, [], [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5299] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] memfd_create("syzkaller", 0 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5300] <... memfd_create resumed>) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5300] munmap(0x7f877d82c000, 138412032) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5300] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5300] close(3) = 0 [pid 5300] mkdir("./file0", 0777) = 0 [ 99.385672][ T5300] loop0: detected capacity change from 0 to 32768 [ 99.401909][ T5300] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5300) [ 99.418540][ T5300] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 99.427812][ T5300] BTRFS info (device loop0): force clearing of disk cache [ 99.434945][ T5300] BTRFS info (device loop0): setting nodatasum [ 99.441090][ T5300] BTRFS info (device loop0): allowing degraded mounts [ 99.447945][ T5300] BTRFS info (device loop0): enabling disk space caching [ 99.454999][ T5300] BTRFS info (device loop0): disk space caching is enabled [ 99.477666][ T5300] BTRFS info (device loop0): enabling ssd optimizations [ 99.484717][ T5300] BTRFS info (device loop0): auto enabling async discard [ 99.493159][ T5300] BTRFS info (device loop0): rebuilding free space tree [ 99.505491][ T5300] BTRFS info (device loop0): disabling free space tree [ 99.512388][ T5300] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.522070][ T5300] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5300] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file0") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [ 99.535445][ T5300] BTRFS info (device loop0): checking UUID tree [pid 5300] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] open("./file0", O_RDONLY) = 4 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5300] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] <... futex resumed>) = 0 [pid 5300] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5299] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5300] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... futex resumed>) = 0 [pid 5300] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5299] <... futex resumed>) = 1 [pid 5299] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5299] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5299] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[38]}, 88) = 38 ./strace-static-x86_64: Process 5318 attached [pid 5318] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], [pid 5318] <... rseq resumed>) = 0 [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5318] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5318] rt_sigprocmask(SIG_SETMASK, [], [pid 5299] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5318] open("./file0", O_RDONLY [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5318] <... open resumed>) = 5 [pid 5318] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [ 99.621037][ T5300] BTRFS info (device loop0): balance: start -d -m [ 99.630555][ T5300] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 99.653943][ T5300] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5318] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5299] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.704514][ T5300] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5299] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5318] <... ioctl resumed>) = 0 [pid 5318] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5300] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] close(3 [pid 5300] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... close resumed>) = 0 [pid 5299] close(4) = 0 [pid 5299] close(5) = 0 [pid 5299] close(6) = -1 EBADF (Bad file descriptor) [pid 5299] close(7) = -1 EBADF (Bad file descriptor) [pid 5299] close(8) = -1 EBADF (Bad file descriptor) [pid 5299] close(9) = -1 EBADF (Bad file descriptor) [pid 5299] close(10) = -1 EBADF (Bad file descriptor) [pid 5299] close(11) = -1 EBADF (Bad file descriptor) [pid 5299] close(12) = -1 EBADF (Bad file descriptor) [ 99.840405][ T5300] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 99.860105][ T5300] BTRFS info (device loop0): balance: ended with status: 0 [pid 5299] close(13) = -1 EBADF (Bad file descriptor) [pid 5299] close(14) = -1 EBADF (Bad file descriptor) [pid 5299] close(15) = -1 EBADF (Bad file descriptor) [pid 5299] close(16) = -1 EBADF (Bad file descriptor) [pid 5299] close(17) = -1 EBADF (Bad file descriptor) [pid 5299] close(18) = -1 EBADF (Bad file descriptor) [pid 5299] close(19) = -1 EBADF (Bad file descriptor) [pid 5299] close(20) = -1 EBADF (Bad file descriptor) [pid 5299] close(21) = -1 EBADF (Bad file descriptor) [pid 5299] close(22) = -1 EBADF (Bad file descriptor) [pid 5299] close(23) = -1 EBADF (Bad file descriptor) [pid 5299] close(24) = -1 EBADF (Bad file descriptor) [pid 5299] close(25) = -1 EBADF (Bad file descriptor) [pid 5299] close(26) = -1 EBADF (Bad file descriptor) [pid 5299] close(27) = -1 EBADF (Bad file descriptor) [pid 5299] close(28) = -1 EBADF (Bad file descriptor) [pid 5299] close(29) = -1 EBADF (Bad file descriptor) [pid 5299] exit_group(0 [pid 5300] <... futex resumed>) = ? [pid 5318] <... futex resumed>) = ? [pid 5300] +++ exited with 0 +++ [pid 5299] <... exit_group resumed>) = ? [pid 5318] +++ exited with 0 +++ [pid 5299] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./11/binderfs") = 0 [pid 5073] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./11/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./11") = 0 [pid 5073] mkdir("./12", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5319 attached , child_tidptr=0x5555570a9690) = 39 [pid 5319] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5319] chdir("./12") = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5319] setpgid(0, 0) = 0 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5319] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5319] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5320 attached => {parent_tid=[40]}, 88) = 40 [pid 5320] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], [pid 5320] set_robust_list(0x7f8785c4c9a0, 24 [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5320] <... set_robust_list resumed>) = 0 [pid 5319] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] rt_sigprocmask(SIG_SETMASK, [], [pid 5319] <... futex resumed>) = 0 [pid 5320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5320] memfd_create("syzkaller", 0) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5320] munmap(0x7f877d82c000, 138412032) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./file0", 0777) = 0 [ 100.462576][ T5320] loop0: detected capacity change from 0 to 32768 [ 100.479365][ T5320] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5320) [ 100.495926][ T5320] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 100.505302][ T5320] BTRFS info (device loop0): force clearing of disk cache [ 100.512401][ T5320] BTRFS info (device loop0): setting nodatasum [ 100.518611][ T5320] BTRFS info (device loop0): allowing degraded mounts [ 100.525406][ T5320] BTRFS info (device loop0): enabling disk space caching [ 100.532413][ T5320] BTRFS info (device loop0): disk space caching is enabled [ 100.554112][ T5320] BTRFS info (device loop0): enabling ssd optimizations [ 100.561091][ T5320] BTRFS info (device loop0): auto enabling async discard [ 100.570044][ T5320] BTRFS info (device loop0): rebuilding free space tree [ 100.581766][ T5320] BTRFS info (device loop0): disabling free space tree [ 100.588956][ T5320] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.598661][ T5320] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5320] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file0") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [pid 5320] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5320] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = 0 [pid 5320] open("./file0", O_RDONLY [pid 5319] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... open resumed>) = 4 [pid 5320] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5320] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5319] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... ioctl resumed>) = 0 [pid 5320] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 100.612653][ T5320] BTRFS info (device loop0): checking UUID tree [pid 5320] <... futex resumed>) = 0 [pid 5320] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5319] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5319] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5319] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 100.685649][ T5320] BTRFS info (device loop0): balance: start -d -m [ 100.694499][ T5320] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 100.725142][ T5320] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[41]}, 88) = 41 ./strace-static-x86_64: Process 5338 attached [pid 5338] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], [pid 5338] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] open("./file0", O_RDONLY [pid 5319] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... open resumed>) = 5 [pid 5338] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 100.780584][ T5320] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5338] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5338] <... ioctl resumed>) = 0 [pid 5338] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5320] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] close(3) = 0 [pid 5319] close(4) = 0 [pid 5319] close(5) = 0 [pid 5319] close(6) = -1 EBADF (Bad file descriptor) [pid 5319] close(7) = -1 EBADF (Bad file descriptor) [pid 5319] close(8) = -1 EBADF (Bad file descriptor) [pid 5319] close(9) = -1 EBADF (Bad file descriptor) [pid 5319] close(10) = -1 EBADF (Bad file descriptor) [pid 5319] close(11) = -1 EBADF (Bad file descriptor) [pid 5319] close(12) = -1 EBADF (Bad file descriptor) [ 100.907214][ T5320] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 100.930826][ T5320] BTRFS info (device loop0): balance: ended with status: 0 [pid 5319] close(13) = -1 EBADF (Bad file descriptor) [pid 5319] close(14) = -1 EBADF (Bad file descriptor) [pid 5319] close(15) = -1 EBADF (Bad file descriptor) [pid 5319] close(16) = -1 EBADF (Bad file descriptor) [pid 5319] close(17) = -1 EBADF (Bad file descriptor) [pid 5319] close(18) = -1 EBADF (Bad file descriptor) [pid 5319] close(19) = -1 EBADF (Bad file descriptor) [pid 5319] close(20) = -1 EBADF (Bad file descriptor) [pid 5319] close(21) = -1 EBADF (Bad file descriptor) [pid 5319] close(22) = -1 EBADF (Bad file descriptor) [pid 5319] close(23) = -1 EBADF (Bad file descriptor) [pid 5319] close(24) = -1 EBADF (Bad file descriptor) [pid 5319] close(25) = -1 EBADF (Bad file descriptor) [pid 5319] close(26) = -1 EBADF (Bad file descriptor) [pid 5319] close(27) = -1 EBADF (Bad file descriptor) [pid 5319] close(28) = -1 EBADF (Bad file descriptor) [pid 5319] close(29) = -1 EBADF (Bad file descriptor) [pid 5319] exit_group(0 [pid 5338] <... futex resumed>) = ? [pid 5319] <... exit_group resumed>) = ? [pid 5338] +++ exited with 0 +++ [pid 5320] <... futex resumed>) = ? [pid 5320] +++ exited with 0 +++ [pid 5319] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./12/binderfs") = 0 [pid 5073] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./12/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./12") = 0 [pid 5073] mkdir("./13", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5339 attached , child_tidptr=0x5555570a9690) = 42 [pid 5339] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5339] chdir("./13") = 0 [pid 5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5339] setpgid(0, 0) = 0 [pid 5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5339] write(3, "1000", 4) = 4 [pid 5339] close(3) = 0 [pid 5339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5339] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5339] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5340 attached [pid 5340] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5339] <... clone3 resumed> => {parent_tid=[43]}, 88) = 43 [pid 5340] <... rseq resumed>) = 0 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], [pid 5340] set_robust_list(0x7f8785c4c9a0, 24 [pid 5339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5340] <... set_robust_list resumed>) = 0 [pid 5340] rt_sigprocmask(SIG_SETMASK, [], [pid 5339] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5339] <... futex resumed>) = 0 [pid 5340] memfd_create("syzkaller", 0 [pid 5339] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5340] <... memfd_create resumed>) = 3 [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5340] munmap(0x7f877d82c000, 138412032) = 0 [pid 5340] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5340] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5340] close(3) = 0 [pid 5340] mkdir("./file0", 0777) = 0 [ 101.498624][ T5340] loop0: detected capacity change from 0 to 32768 [ 101.512518][ T5340] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5340) [ 101.528402][ T5340] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 101.537744][ T5340] BTRFS info (device loop0): force clearing of disk cache [ 101.544906][ T5340] BTRFS info (device loop0): setting nodatasum [ 101.551050][ T5340] BTRFS info (device loop0): allowing degraded mounts [ 101.557847][ T5340] BTRFS info (device loop0): enabling disk space caching [ 101.564912][ T5340] BTRFS info (device loop0): disk space caching is enabled [ 101.587577][ T5340] BTRFS info (device loop0): enabling ssd optimizations [ 101.594568][ T5340] BTRFS info (device loop0): auto enabling async discard [ 101.602308][ T5340] BTRFS info (device loop0): rebuilding free space tree [ 101.614572][ T5340] BTRFS info (device loop0): disabling free space tree [ 101.621463][ T5340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.631139][ T5340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5340] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5340] chdir("./file0") = 0 [pid 5340] ioctl(4, LOOP_CLR_FD) = 0 [pid 5340] close(4) = 0 [pid 5340] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5339] <... futex resumed>) = 0 [ 101.644400][ T5340] BTRFS info (device loop0): checking UUID tree [pid 5339] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] open("./file0", O_RDONLY) = 4 [pid 5339] <... futex resumed>) = 0 [pid 5339] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5340] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5340] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5340] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5339] <... futex resumed>) = 1 [pid 5340] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5339] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5339] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] <... futex resumed>) = 0 [ 101.742566][ T5340] BTRFS info (device loop0): balance: start -d -m [ 101.752880][ T5340] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5340] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5339] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5339] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[44]}, 88) = 44 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5339] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5358 attached [pid 5358] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5358] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5358] open("./file0", O_RDONLY) = 5 [pid 5358] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5358] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5339] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.785185][ T5340] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5339] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5358] <... ioctl resumed>) = 0 [pid 5358] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.924669][ T5340] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 101.949146][ T5340] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5358] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5340] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5340] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] close(3 [pid 5340] <... futex resumed>) = 0 [pid 5339] <... close resumed>) = 0 [pid 5340] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] close(4) = 0 [pid 5339] close(5) = 0 [pid 5339] close(6) = -1 EBADF (Bad file descriptor) [pid 5339] close(7) = -1 EBADF (Bad file descriptor) [pid 5339] close(8) = -1 EBADF (Bad file descriptor) [ 101.969018][ T5340] BTRFS info (device loop0): balance: ended with status: 0 [pid 5339] close(9) = -1 EBADF (Bad file descriptor) [pid 5339] close(10) = -1 EBADF (Bad file descriptor) [pid 5339] close(11) = -1 EBADF (Bad file descriptor) [pid 5339] close(12) = -1 EBADF (Bad file descriptor) [pid 5339] close(13) = -1 EBADF (Bad file descriptor) [pid 5339] close(14) = -1 EBADF (Bad file descriptor) [pid 5339] close(15) = -1 EBADF (Bad file descriptor) [pid 5339] close(16) = -1 EBADF (Bad file descriptor) [pid 5339] close(17) = -1 EBADF (Bad file descriptor) [pid 5339] close(18) = -1 EBADF (Bad file descriptor) [pid 5339] close(19) = -1 EBADF (Bad file descriptor) [pid 5339] close(20) = -1 EBADF (Bad file descriptor) [pid 5339] close(21) = -1 EBADF (Bad file descriptor) [pid 5339] close(22) = -1 EBADF (Bad file descriptor) [pid 5339] close(23) = -1 EBADF (Bad file descriptor) [pid 5339] close(24) = -1 EBADF (Bad file descriptor) [pid 5339] close(25) = -1 EBADF (Bad file descriptor) [pid 5339] close(26) = -1 EBADF (Bad file descriptor) [pid 5339] close(27) = -1 EBADF (Bad file descriptor) [pid 5339] close(28) = -1 EBADF (Bad file descriptor) [pid 5339] close(29) = -1 EBADF (Bad file descriptor) [pid 5339] exit_group(0 [pid 5358] <... futex resumed>) = ? [pid 5340] <... futex resumed>) = ? [pid 5358] +++ exited with 0 +++ [pid 5340] +++ exited with 0 +++ [pid 5339] <... exit_group resumed>) = ? [pid 5339] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./13/binderfs") = 0 [pid 5073] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./13/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./13") = 0 [pid 5073] mkdir("./14", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5359 attached , child_tidptr=0x5555570a9690) = 45 [pid 5359] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5359] chdir("./14") = 0 [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5359] setpgid(0, 0) = 0 [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5359] write(3, "1000", 4) = 4 [pid 5359] close(3) = 0 [pid 5359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5359] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5359] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5360 attached [pid 5360] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5359] <... clone3 resumed> => {parent_tid=[46]}, 88) = 46 [pid 5360] <... rseq resumed>) = 0 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], [pid 5360] set_robust_list(0x7f8785c4c9a0, 24 [pid 5359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5360] <... set_robust_list resumed>) = 0 [pid 5359] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5359] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5360] memfd_create("syzkaller", 0) = 3 [pid 5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5360] munmap(0x7f877d82c000, 138412032) = 0 [pid 5360] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5360] close(3) = 0 [pid 5360] mkdir("./file0", 0777) = 0 [ 102.549352][ T5360] loop0: detected capacity change from 0 to 32768 [ 102.572787][ T5360] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5360) [ 102.588801][ T5360] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 102.598294][ T5360] BTRFS info (device loop0): force clearing of disk cache [ 102.605751][ T5360] BTRFS info (device loop0): setting nodatasum [ 102.611923][ T5360] BTRFS info (device loop0): allowing degraded mounts [ 102.618911][ T5360] BTRFS info (device loop0): enabling disk space caching [ 102.625974][ T5360] BTRFS info (device loop0): disk space caching is enabled [ 102.647927][ T5360] BTRFS info (device loop0): enabling ssd optimizations [ 102.654927][ T5360] BTRFS info (device loop0): auto enabling async discard [ 102.662677][ T5360] BTRFS info (device loop0): rebuilding free space tree [ 102.674923][ T5360] BTRFS info (device loop0): disabling free space tree [ 102.681802][ T5360] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5360] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5360] chdir("./file0") = 0 [pid 5360] ioctl(4, LOOP_CLR_FD) = 0 [pid 5360] close(4) = 0 [pid 5360] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5359] <... futex resumed>) = 0 [pid 5360] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] <... futex resumed>) = 0 [pid 5360] open("./file0", O_RDONLY [pid 5359] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] <... open resumed>) = 4 [pid 5360] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5359] <... futex resumed>) = 0 [pid 5360] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5359] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... ioctl resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [ 102.691479][ T5360] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.704725][ T5360] BTRFS info (device loop0): checking UUID tree [pid 5359] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... futex resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5360] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5359] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5359] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5359] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 102.768482][ T5360] BTRFS info (device loop0): balance: start -d -m [ 102.776912][ T5360] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 102.805709][ T5360] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5378 attached => {parent_tid=[47]}, 88) = 47 [pid 5378] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], [pid 5378] <... rseq resumed>) = 0 [pid 5378] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5378] rt_sigprocmask(SIG_SETMASK, [], [pid 5359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5378] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] <... futex resumed>) = 0 [pid 5378] open("./file0", O_RDONLY [pid 5359] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5378] <... open resumed>) = 5 [pid 5378] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5359] <... futex resumed>) = 0 [pid 5359] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 102.856631][ T5360] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5359] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 102.946369][ T5360] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5378] <... ioctl resumed>) = 0 [pid 5378] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5378] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5360] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5360] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] close(3 [pid 5360] <... futex resumed>) = 0 [pid 5359] <... close resumed>) = 0 [pid 5360] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] close(4) = 0 [pid 5359] close(5) = 0 [pid 5359] close(6) = -1 EBADF (Bad file descriptor) [pid 5359] close(7) = -1 EBADF (Bad file descriptor) [pid 5359] close(8) = -1 EBADF (Bad file descriptor) [pid 5359] close(9) = -1 EBADF (Bad file descriptor) [ 103.012461][ T5360] BTRFS info (device loop0): balance: ended with status: 0 [pid 5359] close(10) = -1 EBADF (Bad file descriptor) [pid 5359] close(11) = -1 EBADF (Bad file descriptor) [pid 5359] close(12) = -1 EBADF (Bad file descriptor) [pid 5359] close(13) = -1 EBADF (Bad file descriptor) [pid 5359] close(14) = -1 EBADF (Bad file descriptor) [pid 5359] close(15) = -1 EBADF (Bad file descriptor) [pid 5359] close(16) = -1 EBADF (Bad file descriptor) [pid 5359] close(17) = -1 EBADF (Bad file descriptor) [pid 5359] close(18) = -1 EBADF (Bad file descriptor) [pid 5359] close(19) = -1 EBADF (Bad file descriptor) [pid 5359] close(20) = -1 EBADF (Bad file descriptor) [pid 5359] close(21) = -1 EBADF (Bad file descriptor) [pid 5359] close(22) = -1 EBADF (Bad file descriptor) [pid 5359] close(23) = -1 EBADF (Bad file descriptor) [pid 5359] close(24) = -1 EBADF (Bad file descriptor) [pid 5359] close(25) = -1 EBADF (Bad file descriptor) [pid 5359] close(26) = -1 EBADF (Bad file descriptor) [pid 5359] close(27) = -1 EBADF (Bad file descriptor) [pid 5359] close(28) = -1 EBADF (Bad file descriptor) [pid 5359] close(29) = -1 EBADF (Bad file descriptor) [pid 5359] exit_group(0 [pid 5360] <... futex resumed>) = ? [pid 5359] <... exit_group resumed>) = ? [pid 5360] +++ exited with 0 +++ [pid 5378] <... futex resumed>) = ? [pid 5378] +++ exited with 0 +++ [pid 5359] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./14/binderfs") = 0 [pid 5073] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./14/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./14") = 0 [pid 5073] mkdir("./15", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5379 attached , child_tidptr=0x5555570a9690) = 48 [pid 5379] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5379] chdir("./15") = 0 [pid 5379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5379] setpgid(0, 0) = 0 [pid 5379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5379] write(3, "1000", 4) = 4 [pid 5379] close(3) = 0 [pid 5379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5379] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5379] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5380 attached [pid 5380] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5379] <... clone3 resumed> => {parent_tid=[49]}, 88) = 49 [pid 5380] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5379] rt_sigprocmask(SIG_SETMASK, [], [pid 5380] rt_sigprocmask(SIG_SETMASK, [], [pid 5379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5379] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] memfd_create("syzkaller", 0 [pid 5379] <... futex resumed>) = 0 [pid 5380] <... memfd_create resumed>) = 3 [pid 5379] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5380] munmap(0x7f877d82c000, 138412032) = 0 [pid 5380] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5380] close(3) = 0 [pid 5380] mkdir("./file0", 0777) = 0 [ 103.598087][ T5380] loop0: detected capacity change from 0 to 32768 [ 103.612833][ T5380] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5380) [ 103.629167][ T5380] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.638433][ T5380] BTRFS info (device loop0): force clearing of disk cache [ 103.645615][ T5380] BTRFS info (device loop0): setting nodatasum [ 103.651811][ T5380] BTRFS info (device loop0): allowing degraded mounts [ 103.658629][ T5380] BTRFS info (device loop0): enabling disk space caching [ 103.665746][ T5380] BTRFS info (device loop0): disk space caching is enabled [ 103.689001][ T5380] BTRFS info (device loop0): enabling ssd optimizations [ 103.696011][ T5380] BTRFS info (device loop0): auto enabling async discard [ 103.704085][ T5380] BTRFS info (device loop0): rebuilding free space tree [ 103.716168][ T5380] BTRFS info (device loop0): disabling free space tree [ 103.723054][ T5380] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5380] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5380] chdir("./file0") = 0 [pid 5380] ioctl(4, LOOP_CLR_FD) = 0 [pid 5380] close(4) = 0 [pid 5380] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5379] <... futex resumed>) = 0 [pid 5379] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5380] open("./file0", O_RDONLY [pid 5379] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... open resumed>) = 4 [pid 5380] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5379] <... futex resumed>) = 0 [pid 5380] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5379] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... futex resumed>) = 0 [pid 5379] <... futex resumed>) = 1 [pid 5380] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5379] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... ioctl resumed>) = 0 [ 103.732766][ T5380] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.746045][ T5380] BTRFS info (device loop0): checking UUID tree [pid 5380] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5379] <... futex resumed>) = 0 [pid 5380] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5379] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 103.827510][ T5380] BTRFS info (device loop0): balance: start -d -m [ 103.836463][ T5380] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5379] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5379] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5379] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[50]}, 88) = 50 [pid 5379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5379] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5379] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5398 attached [pid 5398] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5398] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5398] open("./file0", O_RDONLY) = 5 [pid 5398] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5379] <... futex resumed>) = 0 [pid 5398] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5379] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5379] <... futex resumed>) = 0 [pid 5398] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 103.868028][ T5380] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5379] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5398] <... ioctl resumed>) = 0 [pid 5398] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 104.017263][ T5380] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 104.042669][ T5380] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5398] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5380] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5380] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5380] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5379] close(3) = 0 [pid 5379] close(4) = 0 [pid 5379] close(5) = 0 [pid 5379] close(6) = -1 EBADF (Bad file descriptor) [pid 5379] close(7) = -1 EBADF (Bad file descriptor) [pid 5379] close(8) = -1 EBADF (Bad file descriptor) [pid 5379] close(9) = -1 EBADF (Bad file descriptor) [pid 5379] close(10) = -1 EBADF (Bad file descriptor) [pid 5379] close(11) = -1 EBADF (Bad file descriptor) [ 104.061423][ T5380] BTRFS info (device loop0): balance: ended with status: 0 [pid 5379] close(12) = -1 EBADF (Bad file descriptor) [pid 5379] close(13) = -1 EBADF (Bad file descriptor) [pid 5379] close(14) = -1 EBADF (Bad file descriptor) [pid 5379] close(15) = -1 EBADF (Bad file descriptor) [pid 5379] close(16) = -1 EBADF (Bad file descriptor) [pid 5379] close(17) = -1 EBADF (Bad file descriptor) [pid 5379] close(18) = -1 EBADF (Bad file descriptor) [pid 5379] close(19) = -1 EBADF (Bad file descriptor) [pid 5379] close(20) = -1 EBADF (Bad file descriptor) [pid 5379] close(21) = -1 EBADF (Bad file descriptor) [pid 5379] close(22) = -1 EBADF (Bad file descriptor) [pid 5379] close(23) = -1 EBADF (Bad file descriptor) [pid 5379] close(24) = -1 EBADF (Bad file descriptor) [pid 5379] close(25) = -1 EBADF (Bad file descriptor) [pid 5379] close(26) = -1 EBADF (Bad file descriptor) [pid 5379] close(27) = -1 EBADF (Bad file descriptor) [pid 5379] close(28) = -1 EBADF (Bad file descriptor) [pid 5379] close(29) = -1 EBADF (Bad file descriptor) [pid 5379] exit_group(0 [pid 5398] <... futex resumed>) = ? [pid 5380] <... futex resumed>) = ? [pid 5379] <... exit_group resumed>) = ? [pid 5398] +++ exited with 0 +++ [pid 5380] +++ exited with 0 +++ [pid 5379] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=37 /* 0.37 s */} --- [pid 5073] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./15/binderfs") = 0 [pid 5073] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./15/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./15") = 0 [pid 5073] mkdir("./16", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5399 attached [pid 5399] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 51 [pid 5399] <... set_robust_list resumed>) = 0 [pid 5399] chdir("./16") = 0 [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5399] setpgid(0, 0) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5399] write(3, "1000", 4) = 4 [pid 5399] close(3) = 0 [pid 5399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5399] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5399] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5400 attached [pid 5400] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5400] set_robust_list(0x7f8785c4c9a0, 24 [pid 5399] <... clone3 resumed> => {parent_tid=[52]}, 88) = 52 [pid 5400] <... set_robust_list resumed>) = 0 [pid 5399] rt_sigprocmask(SIG_SETMASK, [], [pid 5400] rt_sigprocmask(SIG_SETMASK, [], [pid 5399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5399] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] memfd_create("syzkaller", 0 [pid 5399] <... futex resumed>) = 0 [pid 5400] <... memfd_create resumed>) = 3 [pid 5400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5399] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5400] munmap(0x7f877d82c000, 138412032) = 0 [pid 5400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5400] close(3) = 0 [pid 5400] mkdir("./file0", 0777) = 0 [ 104.764268][ T5400] loop0: detected capacity change from 0 to 32768 [ 104.781472][ T5400] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5400) [ 104.797131][ T5400] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.806445][ T5400] BTRFS info (device loop0): force clearing of disk cache [ 104.813770][ T5400] BTRFS info (device loop0): setting nodatasum [ 104.820500][ T5400] BTRFS info (device loop0): allowing degraded mounts [ 104.827362][ T5400] BTRFS info (device loop0): enabling disk space caching [ 104.834480][ T5400] BTRFS info (device loop0): disk space caching is enabled [ 104.857811][ T5400] BTRFS info (device loop0): enabling ssd optimizations [ 104.864806][ T5400] BTRFS info (device loop0): auto enabling async discard [ 104.872639][ T5400] BTRFS info (device loop0): rebuilding free space tree [ 104.884909][ T5400] BTRFS info (device loop0): disabling free space tree [ 104.891795][ T5400] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.901646][ T5400] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5400] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5400] chdir("./file0") = 0 [pid 5400] ioctl(4, LOOP_CLR_FD) = 0 [pid 5400] close(4) = 0 [pid 5400] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5399] <... futex resumed>) = 0 [pid 5399] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] open("./file0", O_RDONLY [pid 5399] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5400] <... open resumed>) = 4 [pid 5400] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5400] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] <... futex resumed>) = 0 [pid 5400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5399] <... futex resumed>) = 0 [pid 5400] <... ioctl resumed>) = 0 [pid 5399] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5400] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5400] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 104.915531][ T5400] BTRFS info (device loop0): checking UUID tree [pid 5399] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] <... futex resumed>) = 0 [pid 5400] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 104.988369][ T5400] BTRFS info (device loop0): balance: start -d -m [ 104.999887][ T5400] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5399] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5399] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5399] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[53]}, 88) = 53 [pid 5399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5399] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5419 attached [pid 5419] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5419] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5419] open("./file0", O_RDONLY) = 5 [pid 5419] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5399] <... futex resumed>) = 0 [pid 5419] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] <... futex resumed>) = 0 [pid 5419] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 105.030458][ T5400] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5399] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5399] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5419] <... ioctl resumed>) = 0 [pid 5419] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 105.185303][ T5400] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 105.209255][ T5400] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5419] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5400] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5400] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] close(3 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] <... close resumed>) = 0 [pid 5399] close(4) = 0 [pid 5399] close(5) = 0 [pid 5399] close(6) = -1 EBADF (Bad file descriptor) [pid 5399] close(7) = -1 EBADF (Bad file descriptor) [pid 5399] close(8) = -1 EBADF (Bad file descriptor) [pid 5399] close(9) = -1 EBADF (Bad file descriptor) [pid 5399] close(10) = -1 EBADF (Bad file descriptor) [ 105.228962][ T5400] BTRFS info (device loop0): balance: ended with status: 0 [pid 5399] close(11) = -1 EBADF (Bad file descriptor) [pid 5399] close(12) = -1 EBADF (Bad file descriptor) [pid 5399] close(13) = -1 EBADF (Bad file descriptor) [pid 5399] close(14) = -1 EBADF (Bad file descriptor) [pid 5399] close(15) = -1 EBADF (Bad file descriptor) [pid 5399] close(16) = -1 EBADF (Bad file descriptor) [pid 5399] close(17) = -1 EBADF (Bad file descriptor) [pid 5399] close(18) = -1 EBADF (Bad file descriptor) [pid 5399] close(19) = -1 EBADF (Bad file descriptor) [pid 5399] close(20) = -1 EBADF (Bad file descriptor) [pid 5399] close(21) = -1 EBADF (Bad file descriptor) [pid 5399] close(22) = -1 EBADF (Bad file descriptor) [pid 5399] close(23) = -1 EBADF (Bad file descriptor) [pid 5399] close(24) = -1 EBADF (Bad file descriptor) [pid 5399] close(25) = -1 EBADF (Bad file descriptor) [pid 5399] close(26) = -1 EBADF (Bad file descriptor) [pid 5399] close(27) = -1 EBADF (Bad file descriptor) [pid 5399] close(28) = -1 EBADF (Bad file descriptor) [pid 5399] close(29) = -1 EBADF (Bad file descriptor) [pid 5399] exit_group(0 [pid 5400] <... futex resumed>) = ? [pid 5419] <... futex resumed>) = ? [pid 5399] <... exit_group resumed>) = ? [pid 5419] +++ exited with 0 +++ [pid 5400] +++ exited with 0 +++ [pid 5399] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./16/binderfs") = 0 [pid 5073] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./16/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./16") = 0 [pid 5073] mkdir("./17", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5420 attached [pid 5420] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 54 [pid 5420] <... set_robust_list resumed>) = 0 [pid 5420] chdir("./17") = 0 [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5420] setpgid(0, 0) = 0 [pid 5420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5420] write(3, "1000", 4) = 4 [pid 5420] close(3) = 0 [pid 5420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5420] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5420] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5421 attached [pid 5421] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5421] set_robust_list(0x7f8785c4c9a0, 24 [pid 5420] <... clone3 resumed> => {parent_tid=[55]}, 88) = 55 [pid 5421] <... set_robust_list resumed>) = 0 [pid 5420] rt_sigprocmask(SIG_SETMASK, [], [pid 5421] rt_sigprocmask(SIG_SETMASK, [], [pid 5420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5420] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5421] memfd_create("syzkaller", 0 [pid 5420] <... futex resumed>) = 0 [pid 5420] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5421] <... memfd_create resumed>) = 3 [pid 5421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5421] munmap(0x7f877d82c000, 138412032) = 0 [pid 5421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5421] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5421] close(3) = 0 [pid 5421] mkdir("./file0", 0777) = 0 [ 105.869894][ T5421] loop0: detected capacity change from 0 to 32768 [ 105.896472][ T5421] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5421) [ 105.912940][ T5421] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.922221][ T5421] BTRFS info (device loop0): force clearing of disk cache [ 105.929533][ T5421] BTRFS info (device loop0): setting nodatasum [ 105.935737][ T5421] BTRFS info (device loop0): allowing degraded mounts [ 105.942506][ T5421] BTRFS info (device loop0): enabling disk space caching [ 105.949872][ T5421] BTRFS info (device loop0): disk space caching is enabled [ 105.989606][ T5421] BTRFS info (device loop0): enabling ssd optimizations [ 105.996677][ T5421] BTRFS info (device loop0): auto enabling async discard [ 106.005030][ T5421] BTRFS info (device loop0): rebuilding free space tree [ 106.018592][ T5421] BTRFS info (device loop0): disabling free space tree [ 106.025526][ T5421] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5421] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5421] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5421] chdir("./file0") = 0 [pid 5421] ioctl(4, LOOP_CLR_FD) = 0 [pid 5421] close(4) = 0 [pid 5421] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5420] <... futex resumed>) = 0 [pid 5420] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5421] <... futex resumed>) = 1 [pid 5420] <... futex resumed>) = 0 [pid 5421] open("./file0", O_RDONLY [pid 5420] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5421] <... open resumed>) = 4 [pid 5421] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5420] <... futex resumed>) = 0 [pid 5420] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5421] <... futex resumed>) = 0 [pid 5421] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5420] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5421] <... ioctl resumed>) = 0 [pid 5421] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5420] <... futex resumed>) = 0 [ 106.035191][ T5421] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.048342][ T5421] BTRFS info (device loop0): checking UUID tree [pid 5420] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5421] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5420] <... futex resumed>) = 0 [pid 5420] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5420] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5420] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5440 attached [pid 5440] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5440] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5440] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5420] <... clone3 resumed> => {parent_tid=[56]}, 88) = 56 [pid 5420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5420] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... futex resumed>) = 0 [pid 5420] <... futex resumed>) = 1 [pid 5440] open("./file0", O_RDONLY [pid 5420] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] <... open resumed>) = 5 [pid 5440] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5420] <... futex resumed>) = 0 [pid 5440] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5420] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5420] <... futex resumed>) = 0 [pid 5440] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 106.106393][ T5421] BTRFS info (device loop0): balance: start -d -m [ 106.116947][ T5421] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 106.144203][ T5421] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5420] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5440] <... ioctl resumed>) = 0 [pid 5440] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.313213][ T5421] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 106.338975][ T5421] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5440] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5421] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5421] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5420] close(3) = 0 [pid 5420] close(4) = 0 [pid 5420] close(5) = 0 [pid 5420] close(6) = -1 EBADF (Bad file descriptor) [pid 5420] close(7) = -1 EBADF (Bad file descriptor) [pid 5420] close(8) = -1 EBADF (Bad file descriptor) [pid 5420] close(9) = -1 EBADF (Bad file descriptor) [pid 5420] close(10) = -1 EBADF (Bad file descriptor) [pid 5420] close(11) = -1 EBADF (Bad file descriptor) [pid 5420] close(12) = -1 EBADF (Bad file descriptor) [pid 5420] close(13) = -1 EBADF (Bad file descriptor) [pid 5420] close(14) = -1 EBADF (Bad file descriptor) [ 106.362311][ T5421] BTRFS info (device loop0): balance: ended with status: 0 [pid 5420] close(15) = -1 EBADF (Bad file descriptor) [pid 5420] close(16) = -1 EBADF (Bad file descriptor) [pid 5420] close(17) = -1 EBADF (Bad file descriptor) [pid 5420] close(18) = -1 EBADF (Bad file descriptor) [pid 5420] close(19) = -1 EBADF (Bad file descriptor) [pid 5420] close(20) = -1 EBADF (Bad file descriptor) [pid 5420] close(21) = -1 EBADF (Bad file descriptor) [pid 5420] close(22) = -1 EBADF (Bad file descriptor) [pid 5420] close(23) = -1 EBADF (Bad file descriptor) [pid 5420] close(24) = -1 EBADF (Bad file descriptor) [pid 5420] close(25) = -1 EBADF (Bad file descriptor) [pid 5420] close(26) = -1 EBADF (Bad file descriptor) [pid 5420] close(27) = -1 EBADF (Bad file descriptor) [pid 5420] close(28) = -1 EBADF (Bad file descriptor) [pid 5420] close(29) = -1 EBADF (Bad file descriptor) [pid 5420] exit_group(0 [pid 5421] <... futex resumed>) = ? [pid 5420] <... exit_group resumed>) = ? [pid 5421] +++ exited with 0 +++ [pid 5440] <... futex resumed>) = ? [pid 5440] +++ exited with 0 +++ [pid 5420] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./17/binderfs") = 0 [pid 5073] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./17/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./17") = 0 [pid 5073] mkdir("./18", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5443 attached , child_tidptr=0x5555570a9690) = 57 [pid 5443] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5443] chdir("./18") = 0 [pid 5443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5443] setpgid(0, 0) = 0 [pid 5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5443] write(3, "1000", 4) = 4 [pid 5443] close(3) = 0 [pid 5443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5443] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5443] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5444 attached => {parent_tid=[58]}, 88) = 58 [pid 5444] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5444] set_robust_list(0x7f8785c4c9a0, 24 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5444] <... set_robust_list resumed>) = 0 [pid 5443] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] rt_sigprocmask(SIG_SETMASK, [], [pid 5443] <... futex resumed>) = 0 [pid 5444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5443] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5444] memfd_create("syzkaller", 0) = 3 [pid 5444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5444] munmap(0x7f877d82c000, 138412032) = 0 [pid 5444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5444] close(3) = 0 [pid 5444] mkdir("./file0", 0777) = 0 [ 106.990331][ T5444] loop0: detected capacity change from 0 to 32768 [ 107.003708][ T5444] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5444) [ 107.019346][ T5444] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 107.028620][ T5444] BTRFS info (device loop0): force clearing of disk cache [ 107.035767][ T5444] BTRFS info (device loop0): setting nodatasum [ 107.041928][ T5444] BTRFS info (device loop0): allowing degraded mounts [ 107.048800][ T5444] BTRFS info (device loop0): enabling disk space caching [ 107.055902][ T5444] BTRFS info (device loop0): disk space caching is enabled [ 107.078841][ T5444] BTRFS info (device loop0): enabling ssd optimizations [ 107.085919][ T5444] BTRFS info (device loop0): auto enabling async discard [ 107.093742][ T5444] BTRFS info (device loop0): rebuilding free space tree [ 107.107512][ T5444] BTRFS info (device loop0): disabling free space tree [ 107.114442][ T5444] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.124149][ T5444] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5444] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5444] chdir("./file0") = 0 [pid 5444] ioctl(4, LOOP_CLR_FD) = 0 [ 107.137445][ T5444] BTRFS info (device loop0): checking UUID tree [pid 5444] close(4) = 0 [pid 5444] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5444] open("./file0", O_RDONLY [pid 5443] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5444] <... open resumed>) = 4 [pid 5444] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5444] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5443] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5444] <... ioctl resumed>) = 0 [pid 5444] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5444] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5443] <... futex resumed>) = 0 [pid 5444] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 107.232258][ T5444] BTRFS info (device loop0): balance: start -d -m [ 107.242664][ T5444] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5443] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5443] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5443] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[59]}, 88) = 59 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5443] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5462 attached [pid 5462] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5462] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5462] open("./file0", O_RDONLY) = 5 [pid 5462] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.273175][ T5444] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5462] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5462] <... ioctl resumed>) = 0 [pid 5462] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 107.427136][ T5444] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 107.452165][ T5444] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5462] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5444] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] close(3 [pid 5444] <... futex resumed>) = 0 [pid 5443] <... close resumed>) = 0 [pid 5444] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] close(4) = 0 [pid 5443] close(5) = 0 [pid 5443] close(6) = -1 EBADF (Bad file descriptor) [pid 5443] close(7) = -1 EBADF (Bad file descriptor) [pid 5443] close(8) = -1 EBADF (Bad file descriptor) [pid 5443] close(9) = -1 EBADF (Bad file descriptor) [pid 5443] close(10) = -1 EBADF (Bad file descriptor) [pid 5443] close(11) = -1 EBADF (Bad file descriptor) [pid 5443] close(12) = -1 EBADF (Bad file descriptor) [pid 5443] close(13) = -1 EBADF (Bad file descriptor) [pid 5443] close(14) = -1 EBADF (Bad file descriptor) [pid 5443] close(15) = -1 EBADF (Bad file descriptor) [ 107.471970][ T5444] BTRFS info (device loop0): balance: ended with status: 0 [pid 5443] close(16) = -1 EBADF (Bad file descriptor) [pid 5443] close(17) = -1 EBADF (Bad file descriptor) [pid 5443] close(18) = -1 EBADF (Bad file descriptor) [pid 5443] close(19) = -1 EBADF (Bad file descriptor) [pid 5443] close(20) = -1 EBADF (Bad file descriptor) [pid 5443] close(21) = -1 EBADF (Bad file descriptor) [pid 5443] close(22) = -1 EBADF (Bad file descriptor) [pid 5443] close(23) = -1 EBADF (Bad file descriptor) [pid 5443] close(24) = -1 EBADF (Bad file descriptor) [pid 5443] close(25) = -1 EBADF (Bad file descriptor) [pid 5443] close(26) = -1 EBADF (Bad file descriptor) [pid 5443] close(27) = -1 EBADF (Bad file descriptor) [pid 5443] close(28) = -1 EBADF (Bad file descriptor) [pid 5443] close(29) = -1 EBADF (Bad file descriptor) [pid 5443] exit_group(0 [pid 5462] <... futex resumed>) = ? [pid 5462] +++ exited with 0 +++ [pid 5444] <... futex resumed>) = ? [pid 5443] <... exit_group resumed>) = ? [pid 5444] +++ exited with 0 +++ [pid 5443] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./18/binderfs") = 0 [pid 5073] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./18/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./18") = 0 [pid 5073] mkdir("./19", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5465 attached , child_tidptr=0x5555570a9690) = 60 [pid 5465] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5465] chdir("./19") = 0 [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5465] setpgid(0, 0) = 0 [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5465] write(3, "1000", 4) = 4 [pid 5465] close(3) = 0 [pid 5465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5465] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5465] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5466 attached [pid 5466] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5465] <... clone3 resumed> => {parent_tid=[61]}, 88) = 61 [pid 5466] set_robust_list(0x7f8785c4c9a0, 24 [pid 5465] rt_sigprocmask(SIG_SETMASK, [], [pid 5466] <... set_robust_list resumed>) = 0 [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5466] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5465] <... futex resumed>) = 0 [pid 5466] memfd_create("syzkaller", 0 [pid 5465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5466] <... memfd_create resumed>) = 3 [pid 5466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5466] munmap(0x7f877d82c000, 138412032) = 0 [pid 5466] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5466] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5466] close(3) = 0 [pid 5466] mkdir("./file0", 0777) = 0 [ 108.085614][ T5466] loop0: detected capacity change from 0 to 32768 [ 108.110015][ T5466] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5466) [ 108.125075][ T5466] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 108.134343][ T5466] BTRFS info (device loop0): force clearing of disk cache [ 108.141439][ T5466] BTRFS info (device loop0): setting nodatasum [ 108.147712][ T5466] BTRFS info (device loop0): allowing degraded mounts [ 108.154508][ T5466] BTRFS info (device loop0): enabling disk space caching [ 108.161518][ T5466] BTRFS info (device loop0): disk space caching is enabled [ 108.183197][ T5466] BTRFS info (device loop0): enabling ssd optimizations [ 108.190412][ T5466] BTRFS info (device loop0): auto enabling async discard [ 108.199087][ T5466] BTRFS info (device loop0): rebuilding free space tree [ 108.211185][ T5466] BTRFS info (device loop0): disabling free space tree [ 108.218170][ T5466] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5466] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5466] chdir("./file0") = 0 [pid 5466] ioctl(4, LOOP_CLR_FD) = 0 [pid 5466] close(4) = 0 [pid 5466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5466] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] <... futex resumed>) = 0 [ 108.227854][ T5466] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.240906][ T5466] BTRFS info (device loop0): checking UUID tree [pid 5465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5466] <... futex resumed>) = 0 [pid 5466] open("./file0", O_RDONLY) = 4 [pid 5466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5465] <... futex resumed>) = 0 [pid 5465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5466] <... ioctl resumed>) = 0 [pid 5466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... futex resumed>) = 0 [pid 5465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... futex resumed>) = 1 [pid 5465] <... futex resumed>) = 0 [pid 5465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 108.333600][ T5466] BTRFS info (device loop0): balance: start -d -m [ 108.342572][ T5466] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5466] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5465] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5465] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5484 attached => {parent_tid=[62]}, 88) = 62 [pid 5484] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5465] rt_sigprocmask(SIG_SETMASK, [], [pid 5484] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5484] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5484] open("./file0", O_RDONLY [pid 5465] <... futex resumed>) = 0 [pid 5465] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] <... open resumed>) = 5 [pid 5484] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5465] <... futex resumed>) = 0 [pid 5484] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5465] <... futex resumed>) = 0 [pid 5484] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 108.376412][ T5466] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5465] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5484] <... ioctl resumed>) = 0 [pid 5484] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.502205][ T5466] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 108.527694][ T5466] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5484] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] close(3) = 0 [pid 5465] close(4) = 0 [pid 5465] close(5) = 0 [pid 5465] close(6) = -1 EBADF (Bad file descriptor) [ 108.547875][ T5466] BTRFS info (device loop0): balance: ended with status: 0 [pid 5465] close(7) = -1 EBADF (Bad file descriptor) [pid 5465] close(8) = -1 EBADF (Bad file descriptor) [pid 5465] close(9) = -1 EBADF (Bad file descriptor) [pid 5465] close(10) = -1 EBADF (Bad file descriptor) [pid 5465] close(11) = -1 EBADF (Bad file descriptor) [pid 5465] close(12) = -1 EBADF (Bad file descriptor) [pid 5465] close(13) = -1 EBADF (Bad file descriptor) [pid 5465] close(14) = -1 EBADF (Bad file descriptor) [pid 5465] close(15) = -1 EBADF (Bad file descriptor) [pid 5465] close(16) = -1 EBADF (Bad file descriptor) [pid 5465] close(17) = -1 EBADF (Bad file descriptor) [pid 5465] close(18) = -1 EBADF (Bad file descriptor) [pid 5465] close(19) = -1 EBADF (Bad file descriptor) [pid 5465] close(20) = -1 EBADF (Bad file descriptor) [pid 5465] close(21) = -1 EBADF (Bad file descriptor) [pid 5465] close(22) = -1 EBADF (Bad file descriptor) [pid 5465] close(23) = -1 EBADF (Bad file descriptor) [pid 5465] close(24) = -1 EBADF (Bad file descriptor) [pid 5465] close(25) = -1 EBADF (Bad file descriptor) [pid 5465] close(26) = -1 EBADF (Bad file descriptor) [pid 5465] close(27) = -1 EBADF (Bad file descriptor) [pid 5465] close(28) = -1 EBADF (Bad file descriptor) [pid 5465] close(29) = -1 EBADF (Bad file descriptor) [pid 5465] exit_group(0) = ? [pid 5484] <... futex resumed>) = ? [pid 5466] <... futex resumed>) = ? [pid 5484] +++ exited with 0 +++ [pid 5466] +++ exited with 0 +++ [pid 5465] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./19/binderfs") = 0 [pid 5073] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./19/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./19") = 0 [pid 5073] mkdir("./20", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5485 attached , child_tidptr=0x5555570a9690) = 63 [pid 5485] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5485] chdir("./20") = 0 [pid 5485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5485] setpgid(0, 0) = 0 [pid 5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5485] write(3, "1000", 4) = 4 [pid 5485] close(3) = 0 [pid 5485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5485] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5485] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5486 attached [pid 5486] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5485] <... clone3 resumed> => {parent_tid=[64]}, 88) = 64 [pid 5486] set_robust_list(0x7f8785c4c9a0, 24 [pid 5485] rt_sigprocmask(SIG_SETMASK, [], [pid 5486] <... set_robust_list resumed>) = 0 [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] rt_sigprocmask(SIG_SETMASK, [], [pid 5485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] <... futex resumed>) = 0 [pid 5486] memfd_create("syzkaller", 0 [pid 5485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5486] <... memfd_create resumed>) = 3 [pid 5486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5486] munmap(0x7f877d82c000, 138412032) = 0 [pid 5486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5486] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5486] close(3) = 0 [pid 5486] mkdir("./file0", 0777) = 0 [ 109.207189][ T5486] loop0: detected capacity change from 0 to 32768 [ 109.227085][ T5486] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5486) [ 109.242935][ T5486] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.252236][ T5486] BTRFS info (device loop0): force clearing of disk cache [ 109.259381][ T5486] BTRFS info (device loop0): setting nodatasum [ 109.265582][ T5486] BTRFS info (device loop0): allowing degraded mounts [ 109.272347][ T5486] BTRFS info (device loop0): enabling disk space caching [ 109.279394][ T5486] BTRFS info (device loop0): disk space caching is enabled [ 109.301196][ T5486] BTRFS info (device loop0): enabling ssd optimizations [ 109.308228][ T5486] BTRFS info (device loop0): auto enabling async discard [ 109.317002][ T5486] BTRFS info (device loop0): rebuilding free space tree [ 109.329163][ T5486] BTRFS info (device loop0): disabling free space tree [ 109.336270][ T5486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.345977][ T5486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5486] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5486] chdir("./file0") = 0 [pid 5486] ioctl(4, LOOP_CLR_FD) = 0 [pid 5486] close(4) = 0 [pid 5486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5486] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] <... futex resumed>) = 0 [ 109.359482][ T5486] BTRFS info (device loop0): checking UUID tree [pid 5485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5486] open("./file0", O_RDONLY [pid 5485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] <... open resumed>) = 4 [pid 5486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5486] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... ioctl resumed>) = 0 [pid 5485] <... futex resumed>) = 0 [pid 5486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] <... futex resumed>) = 0 [pid 5485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5485] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5485] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[65]}, 88) = 65 [pid 5485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5485] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5504 attached [pid 5504] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5504] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5504] open("./file0", O_RDONLY) = 5 [pid 5504] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5504] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5504] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 109.436617][ T5486] BTRFS info (device loop0): balance: start -d -m [ 109.446811][ T5486] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 109.475171][ T5486] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5504] <... ioctl resumed>) = 0 [pid 5504] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.638205][ T5486] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 109.662569][ T5486] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5504] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5486] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] close(3) = 0 [pid 5485] close(4) = 0 [pid 5485] close(5) = 0 [ 109.681656][ T5486] BTRFS info (device loop0): balance: ended with status: 0 [pid 5485] close(6) = -1 EBADF (Bad file descriptor) [pid 5485] close(7) = -1 EBADF (Bad file descriptor) [pid 5485] close(8) = -1 EBADF (Bad file descriptor) [pid 5485] close(9) = -1 EBADF (Bad file descriptor) [pid 5485] close(10) = -1 EBADF (Bad file descriptor) [pid 5485] close(11) = -1 EBADF (Bad file descriptor) [pid 5485] close(12) = -1 EBADF (Bad file descriptor) [pid 5485] close(13) = -1 EBADF (Bad file descriptor) [pid 5485] close(14) = -1 EBADF (Bad file descriptor) [pid 5485] close(15) = -1 EBADF (Bad file descriptor) [pid 5485] close(16) = -1 EBADF (Bad file descriptor) [pid 5485] close(17) = -1 EBADF (Bad file descriptor) [pid 5485] close(18) = -1 EBADF (Bad file descriptor) [pid 5485] close(19) = -1 EBADF (Bad file descriptor) [pid 5485] close(20) = -1 EBADF (Bad file descriptor) [pid 5485] close(21) = -1 EBADF (Bad file descriptor) [pid 5485] close(22) = -1 EBADF (Bad file descriptor) [pid 5485] close(23) = -1 EBADF (Bad file descriptor) [pid 5485] close(24) = -1 EBADF (Bad file descriptor) [pid 5485] close(25) = -1 EBADF (Bad file descriptor) [pid 5485] close(26) = -1 EBADF (Bad file descriptor) [pid 5485] close(27) = -1 EBADF (Bad file descriptor) [pid 5485] close(28) = -1 EBADF (Bad file descriptor) [pid 5485] close(29) = -1 EBADF (Bad file descriptor) [pid 5485] exit_group(0 [pid 5504] <... futex resumed>) = ? [pid 5486] <... futex resumed>) = ? [pid 5485] <... exit_group resumed>) = ? [pid 5504] +++ exited with 0 +++ [pid 5486] +++ exited with 0 +++ [pid 5485] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 109.840997][ T5486] syz-executor397 (5486) used greatest stack depth: 20848 bytes left [pid 5073] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./20/binderfs") = 0 [pid 5073] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./20/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./20") = 0 [pid 5073] mkdir("./21", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5505 attached [pid 5505] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 66 [pid 5505] chdir("./21") = 0 [pid 5505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5505] setpgid(0, 0) = 0 [pid 5505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5505] write(3, "1000", 4) = 4 [pid 5505] close(3) = 0 [pid 5505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5505] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5505] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5506 attached [pid 5506] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5506] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5506] rt_sigprocmask(SIG_SETMASK, [], [pid 5505] <... clone3 resumed> => {parent_tid=[67]}, 88) = 67 [pid 5506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5505] rt_sigprocmask(SIG_SETMASK, [], [pid 5506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5506] <... futex resumed>) = 0 [pid 5506] memfd_create("syzkaller", 0 [pid 5505] <... futex resumed>) = 1 [pid 5505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5506] <... memfd_create resumed>) = 3 [pid 5506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5506] munmap(0x7f877d82c000, 138412032) = 0 [pid 5506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5506] close(3) = 0 [pid 5506] mkdir("./file0", 0777) = 0 [ 110.367531][ T5506] loop0: detected capacity change from 0 to 32768 [ 110.392405][ T5506] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5506) [ 110.407575][ T5506] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 110.416879][ T5506] BTRFS info (device loop0): force clearing of disk cache [ 110.424055][ T5506] BTRFS info (device loop0): setting nodatasum [ 110.430217][ T5506] BTRFS info (device loop0): allowing degraded mounts [ 110.437023][ T5506] BTRFS info (device loop0): enabling disk space caching [ 110.444118][ T5506] BTRFS info (device loop0): disk space caching is enabled [ 110.466565][ T5506] BTRFS info (device loop0): enabling ssd optimizations [ 110.473530][ T5506] BTRFS info (device loop0): auto enabling async discard [ 110.482049][ T5506] BTRFS info (device loop0): rebuilding free space tree [ 110.493790][ T5506] BTRFS info (device loop0): disabling free space tree [ 110.500736][ T5506] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5506] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5506] chdir("./file0") = 0 [pid 5506] ioctl(4, LOOP_CLR_FD) = 0 [pid 5506] close(4) = 0 [pid 5506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5505] <... futex resumed>) = 0 [pid 5505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5506] open("./file0", O_RDONLY [pid 5505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5506] <... open resumed>) = 4 [ 110.510436][ T5506] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.523838][ T5506] BTRFS info (device loop0): checking UUID tree [pid 5506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5505] <... futex resumed>) = 0 [pid 5505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5506] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5505] <... futex resumed>) = 0 [pid 5505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5506] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5505] <... futex resumed>) = 0 [ 110.622381][ T5506] BTRFS info (device loop0): balance: start -d -m [ 110.631813][ T5506] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5505] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5505] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[68]}, 88) = 68 [pid 5505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5505] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5524 attached [pid 5524] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5524] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5524] open("./file0", O_RDONLY) = 5 [pid 5524] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5505] <... futex resumed>) = 0 [pid 5524] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5505] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5505] <... futex resumed>) = 0 [pid 5524] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 110.663395][ T5506] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5524] <... ioctl resumed>) = 0 [pid 5524] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.786602][ T5506] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 110.812504][ T5506] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5524] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5505] close(3 [pid 5506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5505] <... close resumed>) = 0 [pid 5505] close(4) = 0 [pid 5505] close(5) = 0 [pid 5505] close(6) = -1 EBADF (Bad file descriptor) [pid 5505] close(7) = -1 EBADF (Bad file descriptor) [pid 5505] close(8) = -1 EBADF (Bad file descriptor) [pid 5505] close(9) = -1 EBADF (Bad file descriptor) [pid 5505] close(10) = -1 EBADF (Bad file descriptor) [pid 5505] close(11) = -1 EBADF (Bad file descriptor) [ 110.831945][ T5506] BTRFS info (device loop0): balance: ended with status: 0 [pid 5505] close(12) = -1 EBADF (Bad file descriptor) [pid 5505] close(13) = -1 EBADF (Bad file descriptor) [pid 5505] close(14) = -1 EBADF (Bad file descriptor) [pid 5505] close(15) = -1 EBADF (Bad file descriptor) [pid 5505] close(16) = -1 EBADF (Bad file descriptor) [pid 5505] close(17) = -1 EBADF (Bad file descriptor) [pid 5505] close(18) = -1 EBADF (Bad file descriptor) [pid 5505] close(19) = -1 EBADF (Bad file descriptor) [pid 5505] close(20) = -1 EBADF (Bad file descriptor) [pid 5505] close(21) = -1 EBADF (Bad file descriptor) [pid 5505] close(22) = -1 EBADF (Bad file descriptor) [pid 5505] close(23) = -1 EBADF (Bad file descriptor) [pid 5505] close(24) = -1 EBADF (Bad file descriptor) [pid 5505] close(25) = -1 EBADF (Bad file descriptor) [pid 5505] close(26) = -1 EBADF (Bad file descriptor) [pid 5505] close(27) = -1 EBADF (Bad file descriptor) [pid 5505] close(28) = -1 EBADF (Bad file descriptor) [pid 5505] close(29) = -1 EBADF (Bad file descriptor) [pid 5505] exit_group(0 [pid 5506] <... futex resumed>) = ? [pid 5524] <... futex resumed>) = ? [pid 5505] <... exit_group resumed>) = ? [pid 5506] +++ exited with 0 +++ [pid 5524] +++ exited with 0 +++ [pid 5505] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./21/binderfs") = 0 [pid 5073] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./21/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./21") = 0 [pid 5073] mkdir("./22", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5525 attached , child_tidptr=0x5555570a9690) = 69 [pid 5525] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5525] chdir("./22") = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5525] setpgid(0, 0) = 0 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5525] write(3, "1000", 4) = 4 [pid 5525] close(3) = 0 [pid 5525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5525] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5525] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5526 attached [pid 5526] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5525] <... clone3 resumed> => {parent_tid=[70]}, 88) = 70 [pid 5526] set_robust_list(0x7f8785c4c9a0, 24 [pid 5525] rt_sigprocmask(SIG_SETMASK, [], [pid 5526] <... set_robust_list resumed>) = 0 [pid 5526] rt_sigprocmask(SIG_SETMASK, [], [pid 5525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] memfd_create("syzkaller", 0 [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5526] <... memfd_create resumed>) = 3 [pid 5526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5526] munmap(0x7f877d82c000, 138412032) = 0 [pid 5526] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5526] close(3) = 0 [pid 5526] mkdir("./file0", 0777) = 0 [ 111.446363][ T5526] loop0: detected capacity change from 0 to 32768 [ 111.471095][ T5526] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5526) [ 111.486212][ T5526] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.495470][ T5526] BTRFS info (device loop0): force clearing of disk cache [ 111.502564][ T5526] BTRFS info (device loop0): setting nodatasum [ 111.508751][ T5526] BTRFS info (device loop0): allowing degraded mounts [ 111.515561][ T5526] BTRFS info (device loop0): enabling disk space caching [ 111.522580][ T5526] BTRFS info (device loop0): disk space caching is enabled [ 111.544795][ T5526] BTRFS info (device loop0): enabling ssd optimizations [ 111.551749][ T5526] BTRFS info (device loop0): auto enabling async discard [ 111.560645][ T5526] BTRFS info (device loop0): rebuilding free space tree [ 111.573463][ T5526] BTRFS info (device loop0): disabling free space tree [ 111.580806][ T5526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5526] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5526] chdir("./file0") = 0 [pid 5526] ioctl(4, LOOP_CLR_FD) = 0 [pid 5526] close(4) = 0 [pid 5526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5526] <... futex resumed>) = 0 [ 111.590688][ T5526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.604327][ T5526] BTRFS info (device loop0): checking UUID tree [pid 5526] open("./file0", O_RDONLY) = 4 [pid 5526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5526] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5526] <... ioctl resumed>) = 0 [pid 5525] <... futex resumed>) = 0 [pid 5526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5526] <... futex resumed>) = 0 [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5526] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5525] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5525] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[71]}, 88) = 71 [pid 5525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5525] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5544 attached [pid 5544] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5544] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5544] open("./file0", O_RDONLY) = 5 [pid 5544] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5544] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] <... futex resumed>) = 0 [ 111.669652][ T5526] BTRFS info (device loop0): balance: start -d -m [ 111.679867][ T5526] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 111.709620][ T5526] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5544] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5525] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5544] <... ioctl resumed>) = 0 [pid 5544] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.873642][ T5526] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 111.902881][ T5526] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5544] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5526] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] close(3) = 0 [pid 5525] close(4) = 0 [pid 5525] close(5) = 0 [pid 5525] close(6) = -1 EBADF (Bad file descriptor) [pid 5525] close(7) = -1 EBADF (Bad file descriptor) [pid 5525] close(8) = -1 EBADF (Bad file descriptor) [pid 5525] close(9) = -1 EBADF (Bad file descriptor) [pid 5525] close(10) = -1 EBADF (Bad file descriptor) [pid 5525] close(11) = -1 EBADF (Bad file descriptor) [pid 5525] close(12) = -1 EBADF (Bad file descriptor) [pid 5525] close(13) = -1 EBADF (Bad file descriptor) [ 111.922546][ T5526] BTRFS info (device loop0): balance: ended with status: 0 [pid 5525] close(14) = -1 EBADF (Bad file descriptor) [pid 5525] close(15) = -1 EBADF (Bad file descriptor) [pid 5525] close(16) = -1 EBADF (Bad file descriptor) [pid 5525] close(17) = -1 EBADF (Bad file descriptor) [pid 5525] close(18) = -1 EBADF (Bad file descriptor) [pid 5525] close(19) = -1 EBADF (Bad file descriptor) [pid 5525] close(20) = -1 EBADF (Bad file descriptor) [pid 5525] close(21) = -1 EBADF (Bad file descriptor) [pid 5525] close(22) = -1 EBADF (Bad file descriptor) [pid 5525] close(23) = -1 EBADF (Bad file descriptor) [pid 5525] close(24) = -1 EBADF (Bad file descriptor) [pid 5525] close(25) = -1 EBADF (Bad file descriptor) [pid 5525] close(26) = -1 EBADF (Bad file descriptor) [pid 5525] close(27) = -1 EBADF (Bad file descriptor) [pid 5525] close(28) = -1 EBADF (Bad file descriptor) [pid 5525] close(29) = -1 EBADF (Bad file descriptor) [pid 5525] exit_group(0 [pid 5544] <... futex resumed>) = ? [pid 5526] <... futex resumed>) = ? [pid 5525] <... exit_group resumed>) = ? [pid 5544] +++ exited with 0 +++ [pid 5526] +++ exited with 0 +++ [pid 5525] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./22/binderfs") = 0 [pid 5073] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./22/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./22") = 0 [pid 5073] mkdir("./23", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5545 attached [pid 5545] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5545] chdir("./23" [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 72 [pid 5545] <... chdir resumed>) = 0 [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5545] setpgid(0, 0) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5545] write(3, "1000", 4) = 4 [pid 5545] close(3) = 0 [pid 5545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5545] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5545] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5546 attached [pid 5546] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5545] <... clone3 resumed> => {parent_tid=[73]}, 88) = 73 [pid 5546] <... rseq resumed>) = 0 [pid 5545] rt_sigprocmask(SIG_SETMASK, [], [pid 5546] set_robust_list(0x7f8785c4c9a0, 24 [pid 5545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5546] <... set_robust_list resumed>) = 0 [pid 5545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5546] rt_sigprocmask(SIG_SETMASK, [], [pid 5545] <... futex resumed>) = 0 [pid 5546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5546] memfd_create("syzkaller", 0) = 3 [pid 5546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5546] munmap(0x7f877d82c000, 138412032) = 0 [pid 5546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5546] close(3) = 0 [pid 5546] mkdir("./file0", 0777) = 0 [ 112.481636][ T5546] loop0: detected capacity change from 0 to 32768 [ 112.505029][ T5546] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5546) [ 112.521756][ T5546] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 112.531045][ T5546] BTRFS info (device loop0): force clearing of disk cache [ 112.538199][ T5546] BTRFS info (device loop0): setting nodatasum [ 112.544393][ T5546] BTRFS info (device loop0): allowing degraded mounts [ 112.551163][ T5546] BTRFS info (device loop0): enabling disk space caching [ 112.558249][ T5546] BTRFS info (device loop0): disk space caching is enabled [ 112.579984][ T5546] BTRFS info (device loop0): enabling ssd optimizations [ 112.587082][ T5546] BTRFS info (device loop0): auto enabling async discard [ 112.595395][ T5546] BTRFS info (device loop0): rebuilding free space tree [ 112.608139][ T5546] BTRFS info (device loop0): disabling free space tree [ 112.615088][ T5546] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5546] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5546] chdir("./file0") = 0 [pid 5546] ioctl(4, LOOP_CLR_FD) = 0 [pid 5546] close(4) = 0 [pid 5546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] open("./file0", O_RDONLY) = 4 [ 112.625036][ T5546] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.638956][ T5546] BTRFS info (device loop0): checking UUID tree [pid 5546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5546] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5545] <... futex resumed>) = 0 [pid 5546] <... ioctl resumed>) = 0 [pid 5545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] <... futex resumed>) = 0 [pid 5545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] <... futex resumed>) = 0 [pid 5546] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5545] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5545] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5564 attached => {parent_tid=[74]}, 88) = 74 [pid 5564] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5545] rt_sigprocmask(SIG_SETMASK, [], [pid 5564] <... rseq resumed>) = 0 [pid 5545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5564] set_robust_list(0x7f8785c2b9a0, 24 [pid 5545] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... set_robust_list resumed>) = 0 [pid 5545] <... futex resumed>) = 0 [pid 5564] rt_sigprocmask(SIG_SETMASK, [], [pid 5545] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5564] open("./file0", O_RDONLY) = 5 [pid 5564] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5545] <... futex resumed>) = 0 [pid 5564] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5545] <... futex resumed>) = 0 [pid 5564] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 112.748842][ T5546] BTRFS info (device loop0): balance: start -d -m [ 112.758824][ T5546] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 112.786040][ T5546] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5545] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5564] <... ioctl resumed>) = 0 [pid 5564] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.872070][ T5546] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5564] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5546] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5545] close(3) = 0 [pid 5545] close(4) = 0 [pid 5545] close(5) = 0 [pid 5545] close(6) = -1 EBADF (Bad file descriptor) [pid 5545] close(7) = -1 EBADF (Bad file descriptor) [pid 5545] close(8) = -1 EBADF (Bad file descriptor) [pid 5545] close(9) = -1 EBADF (Bad file descriptor) [pid 5545] close(10) = -1 EBADF (Bad file descriptor) [ 112.936809][ T5546] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 112.956512][ T5546] BTRFS info (device loop0): balance: ended with status: 0 [pid 5545] close(11) = -1 EBADF (Bad file descriptor) [pid 5545] close(12) = -1 EBADF (Bad file descriptor) [pid 5545] close(13) = -1 EBADF (Bad file descriptor) [pid 5545] close(14) = -1 EBADF (Bad file descriptor) [pid 5545] close(15) = -1 EBADF (Bad file descriptor) [pid 5545] close(16) = -1 EBADF (Bad file descriptor) [pid 5545] close(17) = -1 EBADF (Bad file descriptor) [pid 5545] close(18) = -1 EBADF (Bad file descriptor) [pid 5545] close(19) = -1 EBADF (Bad file descriptor) [pid 5545] close(20) = -1 EBADF (Bad file descriptor) [pid 5545] close(21) = -1 EBADF (Bad file descriptor) [pid 5545] close(22) = -1 EBADF (Bad file descriptor) [pid 5545] close(23) = -1 EBADF (Bad file descriptor) [pid 5545] close(24) = -1 EBADF (Bad file descriptor) [pid 5545] close(25) = -1 EBADF (Bad file descriptor) [pid 5545] close(26) = -1 EBADF (Bad file descriptor) [pid 5545] close(27) = -1 EBADF (Bad file descriptor) [pid 5545] close(28) = -1 EBADF (Bad file descriptor) [pid 5545] close(29) = -1 EBADF (Bad file descriptor) [pid 5545] exit_group(0 [pid 5564] <... futex resumed>) = ? [pid 5546] <... futex resumed>) = ? [pid 5545] <... exit_group resumed>) = ? [pid 5564] +++ exited with 0 +++ [pid 5546] +++ exited with 0 +++ [pid 5545] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./23/binderfs") = 0 [pid 5073] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./23/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./23") = 0 [pid 5073] mkdir("./24", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570a9690) = 75 ./strace-static-x86_64: Process 5565 attached [pid 5565] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5565] chdir("./24") = 0 [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5565] setpgid(0, 0) = 0 [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5565] write(3, "1000", 4) = 4 [pid 5565] close(3) = 0 [pid 5565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5565] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5565] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5566 attached [pid 5566] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5565] <... clone3 resumed> => {parent_tid=[76]}, 88) = 76 [pid 5566] <... rseq resumed>) = 0 [pid 5565] rt_sigprocmask(SIG_SETMASK, [], [pid 5566] set_robust_list(0x7f8785c4c9a0, 24 [pid 5565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5566] <... set_robust_list resumed>) = 0 [pid 5565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5566] memfd_create("syzkaller", 0) = 3 [pid 5566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5566] munmap(0x7f877d82c000, 138412032) = 0 [pid 5566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5566] close(3) = 0 [pid 5566] mkdir("./file0", 0777) = 0 [ 113.514166][ T5566] loop0: detected capacity change from 0 to 32768 [ 113.538102][ T5566] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5566) [ 113.553976][ T5566] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 113.563228][ T5566] BTRFS info (device loop0): force clearing of disk cache [ 113.570382][ T5566] BTRFS info (device loop0): setting nodatasum [ 113.576583][ T5566] BTRFS info (device loop0): allowing degraded mounts [ 113.583340][ T5566] BTRFS info (device loop0): enabling disk space caching [ 113.590393][ T5566] BTRFS info (device loop0): disk space caching is enabled [ 113.612371][ T5566] BTRFS info (device loop0): enabling ssd optimizations [ 113.619403][ T5566] BTRFS info (device loop0): auto enabling async discard [ 113.628216][ T5566] BTRFS info (device loop0): rebuilding free space tree [ 113.642571][ T5566] BTRFS info (device loop0): disabling free space tree [ 113.649798][ T5566] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5566] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5566] chdir("./file0") = 0 [pid 5566] ioctl(4, LOOP_CLR_FD) = 0 [pid 5566] close(4) = 0 [pid 5566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... futex resumed>) = 0 [pid 5565] <... futex resumed>) = 1 [pid 5565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.659625][ T5566] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.672711][ T5566] BTRFS info (device loop0): checking UUID tree [pid 5566] open("./file0", O_RDONLY) = 4 [pid 5566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5565] <... futex resumed>) = 0 [pid 5566] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] <... ioctl resumed>) = 0 [pid 5566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5566] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5565] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5565] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5584 attached => {parent_tid=[77]}, 88) = 77 [pid 5565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5584] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5565] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... rseq resumed>) = 0 [pid 5565] <... futex resumed>) = 0 [pid 5584] set_robust_list(0x7f8785c2b9a0, 24 [pid 5565] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... set_robust_list resumed>) = 0 [pid 5584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5584] open("./file0", O_RDONLY) = 5 [pid 5584] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5584] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5565] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 113.761636][ T5566] BTRFS info (device loop0): balance: start -d -m [ 113.771976][ T5566] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 113.801360][ T5566] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5565] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5584] <... ioctl resumed>) = 0 [pid 5584] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5584] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5566] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] close(3) = 0 [pid 5565] close(4) = 0 [pid 5565] close(5) = 0 [pid 5565] close(6) = -1 EBADF (Bad file descriptor) [pid 5565] close(7) = -1 EBADF (Bad file descriptor) [ 113.958347][ T5566] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 113.982330][ T5566] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 114.001275][ T5566] BTRFS info (device loop0): balance: ended with status: 0 [pid 5565] close(8) = -1 EBADF (Bad file descriptor) [pid 5565] close(9) = -1 EBADF (Bad file descriptor) [pid 5565] close(10) = -1 EBADF (Bad file descriptor) [pid 5565] close(11) = -1 EBADF (Bad file descriptor) [pid 5565] close(12) = -1 EBADF (Bad file descriptor) [pid 5565] close(13) = -1 EBADF (Bad file descriptor) [pid 5565] close(14) = -1 EBADF (Bad file descriptor) [pid 5565] close(15) = -1 EBADF (Bad file descriptor) [pid 5565] close(16) = -1 EBADF (Bad file descriptor) [pid 5565] close(17) = -1 EBADF (Bad file descriptor) [pid 5565] close(18) = -1 EBADF (Bad file descriptor) [pid 5565] close(19) = -1 EBADF (Bad file descriptor) [pid 5565] close(20) = -1 EBADF (Bad file descriptor) [pid 5565] close(21) = -1 EBADF (Bad file descriptor) [pid 5565] close(22) = -1 EBADF (Bad file descriptor) [pid 5565] close(23) = -1 EBADF (Bad file descriptor) [pid 5565] close(24) = -1 EBADF (Bad file descriptor) [pid 5565] close(25) = -1 EBADF (Bad file descriptor) [pid 5565] close(26) = -1 EBADF (Bad file descriptor) [pid 5565] close(27) = -1 EBADF (Bad file descriptor) [pid 5565] close(28) = -1 EBADF (Bad file descriptor) [pid 5565] close(29) = -1 EBADF (Bad file descriptor) [pid 5565] exit_group(0 [pid 5584] <... futex resumed>) = ? [pid 5566] <... futex resumed>) = ? [pid 5565] <... exit_group resumed>) = ? [pid 5584] +++ exited with 0 +++ [pid 5566] +++ exited with 0 +++ [pid 5565] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./24/binderfs") = 0 [pid 5073] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./24/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./24") = 0 [pid 5073] mkdir("./25", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5585 attached [pid 5585] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 78 [pid 5585] <... set_robust_list resumed>) = 0 [pid 5585] chdir("./25") = 0 [pid 5585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5585] setpgid(0, 0) = 0 [pid 5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5585] write(3, "1000", 4) = 4 [pid 5585] close(3) = 0 [pid 5585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5585] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5585] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5586 attached [pid 5586] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5585] <... clone3 resumed> => {parent_tid=[79]}, 88) = 79 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... rseq resumed>) = 0 [pid 5586] set_robust_list(0x7f8785c4c9a0, 24 [pid 5585] <... futex resumed>) = 0 [pid 5586] <... set_robust_list resumed>) = 0 [pid 5585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5586] memfd_create("syzkaller", 0) = 3 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5586] munmap(0x7f877d82c000, 138412032) = 0 [pid 5586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5586] close(3) = 0 [pid 5586] mkdir("./file0", 0777) = 0 [ 114.643840][ T5586] loop0: detected capacity change from 0 to 32768 [ 114.663566][ T5586] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5586) [ 114.678998][ T5586] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 114.688356][ T5586] BTRFS info (device loop0): force clearing of disk cache [ 114.695515][ T5586] BTRFS info (device loop0): setting nodatasum [ 114.701656][ T5586] BTRFS info (device loop0): allowing degraded mounts [ 114.708525][ T5586] BTRFS info (device loop0): enabling disk space caching [ 114.715791][ T5586] BTRFS info (device loop0): disk space caching is enabled [ 114.737529][ T5586] BTRFS info (device loop0): enabling ssd optimizations [ 114.744631][ T5586] BTRFS info (device loop0): auto enabling async discard [ 114.752784][ T5586] BTRFS info (device loop0): rebuilding free space tree [ 114.766428][ T5586] BTRFS info (device loop0): disabling free space tree [ 114.773311][ T5586] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.782996][ T5586] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5586] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5586] chdir("./file0") = 0 [pid 5586] ioctl(4, LOOP_CLR_FD) = 0 [pid 5586] close(4) = 0 [pid 5586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] open("./file0", O_RDONLY [pid 5585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] <... open resumed>) = 4 [pid 5586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5586] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] <... ioctl resumed>) = 0 [pid 5586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5585] <... futex resumed>) = 0 [ 114.796105][ T5586] BTRFS info (device loop0): checking UUID tree [pid 5585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5585] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5585] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5604 attached => {parent_tid=[80]}, 88) = 80 [pid 5604] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], [pid 5604] <... rseq resumed>) = 0 [pid 5585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5604] set_robust_list(0x7f8785c2b9a0, 24 [pid 5585] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] <... set_robust_list resumed>) = 0 [pid 5585] <... futex resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], [pid 5585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5604] open("./file0", O_RDONLY) = 5 [pid 5604] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5585] <... futex resumed>) = 0 [ 114.860024][ T5586] BTRFS info (device loop0): balance: start -d -m [ 114.869277][ T5586] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 114.893838][ T5586] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 114.990536][ T5586] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5604] <... ioctl resumed>) = 0 [pid 5604] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5604] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5586] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] close(3) = 0 [pid 5585] close(4) = 0 [pid 5585] close(5) = 0 [pid 5585] close(6) = -1 EBADF (Bad file descriptor) [pid 5585] close(7) = -1 EBADF (Bad file descriptor) [pid 5585] close(8) = -1 EBADF (Bad file descriptor) [pid 5585] close(9) = -1 EBADF (Bad file descriptor) [pid 5585] close(10) = -1 EBADF (Bad file descriptor) [pid 5585] close(11) = -1 EBADF (Bad file descriptor) [ 115.086149][ T5586] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 115.106311][ T5586] BTRFS info (device loop0): balance: ended with status: 0 [pid 5585] close(12) = -1 EBADF (Bad file descriptor) [pid 5585] close(13) = -1 EBADF (Bad file descriptor) [pid 5585] close(14) = -1 EBADF (Bad file descriptor) [pid 5585] close(15) = -1 EBADF (Bad file descriptor) [pid 5585] close(16) = -1 EBADF (Bad file descriptor) [pid 5585] close(17) = -1 EBADF (Bad file descriptor) [pid 5585] close(18) = -1 EBADF (Bad file descriptor) [pid 5585] close(19) = -1 EBADF (Bad file descriptor) [pid 5585] close(20) = -1 EBADF (Bad file descriptor) [pid 5585] close(21) = -1 EBADF (Bad file descriptor) [pid 5585] close(22) = -1 EBADF (Bad file descriptor) [pid 5585] close(23) = -1 EBADF (Bad file descriptor) [pid 5585] close(24) = -1 EBADF (Bad file descriptor) [pid 5585] close(25) = -1 EBADF (Bad file descriptor) [pid 5585] close(26) = -1 EBADF (Bad file descriptor) [pid 5585] close(27) = -1 EBADF (Bad file descriptor) [pid 5585] close(28) = -1 EBADF (Bad file descriptor) [pid 5585] close(29) = -1 EBADF (Bad file descriptor) [pid 5585] exit_group(0 [pid 5586] <... futex resumed>) = ? [pid 5585] <... exit_group resumed>) = ? [pid 5604] <... futex resumed>) = ? [pid 5604] +++ exited with 0 +++ [pid 5586] +++ exited with 0 +++ [pid 5585] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./25/binderfs") = 0 [pid 5073] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./25/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./25") = 0 [pid 5073] mkdir("./26", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5605 attached [pid 5605] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 81 [pid 5605] chdir("./26") = 0 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5605] setpgid(0, 0) = 0 [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5605] write(3, "1000", 4) = 4 [pid 5605] close(3) = 0 [pid 5605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5605] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5605] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5606 attached [pid 5606] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5605] <... clone3 resumed> => {parent_tid=[82]}, 88) = 82 [pid 5606] <... rseq resumed>) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], [pid 5606] set_robust_list(0x7f8785c4c9a0, 24 [pid 5605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5606] <... set_robust_list resumed>) = 0 [pid 5605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], [pid 5605] <... futex resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5606] memfd_create("syzkaller", 0) = 3 [pid 5606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5606] munmap(0x7f877d82c000, 138412032) = 0 [pid 5606] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5606] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5606] close(3) = 0 [pid 5606] mkdir("./file0", 0777) = 0 [ 115.691408][ T5606] loop0: detected capacity change from 0 to 32768 [ 115.715541][ T5606] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5606) [ 115.730976][ T5606] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 115.740256][ T5606] BTRFS info (device loop0): force clearing of disk cache [ 115.747401][ T5606] BTRFS info (device loop0): setting nodatasum [ 115.753560][ T5606] BTRFS info (device loop0): allowing degraded mounts [ 115.760365][ T5606] BTRFS info (device loop0): enabling disk space caching [ 115.767409][ T5606] BTRFS info (device loop0): disk space caching is enabled [ 115.788740][ T5606] BTRFS info (device loop0): enabling ssd optimizations [ 115.795952][ T5606] BTRFS info (device loop0): auto enabling async discard [ 115.804599][ T5606] BTRFS info (device loop0): rebuilding free space tree [ 115.816798][ T5606] BTRFS info (device loop0): disabling free space tree [ 115.823696][ T5606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5606] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5606] chdir("./file0") = 0 [pid 5606] ioctl(4, LOOP_CLR_FD) = 0 [pid 5606] close(4) = 0 [pid 5606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... futex resumed>) = 0 [pid 5606] <... futex resumed>) = 1 [pid 5605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] open("./file0", O_RDONLY [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] <... open resumed>) = 4 [pid 5606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 115.833373][ T5606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.846415][ T5606] BTRFS info (device loop0): checking UUID tree [pid 5606] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] <... futex resumed>) = 0 [pid 5605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... futex resumed>) = 0 [pid 5605] <... futex resumed>) = 1 [pid 5606] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5605] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5605] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[83]}, 88) = 83 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5624 attached [pid 5624] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5624] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5624] open("./file0", O_RDONLY) = 5 [pid 5624] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5605] <... futex resumed>) = 0 [pid 5624] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5605] <... futex resumed>) = 0 [pid 5624] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 115.923503][ T5606] BTRFS info (device loop0): balance: start -d -m [ 115.933203][ T5606] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 115.959017][ T5606] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 116.056621][ T5606] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5624] <... ioctl resumed>) = 0 [pid 5624] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5624] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] close(3) = 0 [pid 5605] close(4) = 0 [pid 5605] close(5) = 0 [pid 5605] close(6) = -1 EBADF (Bad file descriptor) [pid 5605] close(7) = -1 EBADF (Bad file descriptor) [pid 5605] close(8) = -1 EBADF (Bad file descriptor) [pid 5605] close(9) = -1 EBADF (Bad file descriptor) [pid 5605] close(10) = -1 EBADF (Bad file descriptor) [pid 5605] close(11) = -1 EBADF (Bad file descriptor) [pid 5605] close(12) = -1 EBADF (Bad file descriptor) [ 116.155760][ T5606] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 116.176706][ T5606] BTRFS info (device loop0): balance: ended with status: 0 [pid 5605] close(13) = -1 EBADF (Bad file descriptor) [pid 5605] close(14) = -1 EBADF (Bad file descriptor) [pid 5605] close(15) = -1 EBADF (Bad file descriptor) [pid 5605] close(16) = -1 EBADF (Bad file descriptor) [pid 5605] close(17) = -1 EBADF (Bad file descriptor) [pid 5605] close(18) = -1 EBADF (Bad file descriptor) [pid 5605] close(19) = -1 EBADF (Bad file descriptor) [pid 5605] close(20) = -1 EBADF (Bad file descriptor) [pid 5605] close(21) = -1 EBADF (Bad file descriptor) [pid 5605] close(22) = -1 EBADF (Bad file descriptor) [pid 5605] close(23) = -1 EBADF (Bad file descriptor) [pid 5605] close(24) = -1 EBADF (Bad file descriptor) [pid 5605] close(25) = -1 EBADF (Bad file descriptor) [pid 5605] close(26) = -1 EBADF (Bad file descriptor) [pid 5605] close(27) = -1 EBADF (Bad file descriptor) [pid 5605] close(28) = -1 EBADF (Bad file descriptor) [pid 5605] close(29) = -1 EBADF (Bad file descriptor) [pid 5605] exit_group(0 [pid 5624] <... futex resumed>) = ? [pid 5605] <... exit_group resumed>) = ? [pid 5606] <... futex resumed>) = ? [pid 5624] +++ exited with 0 +++ [pid 5606] +++ exited with 0 +++ [pid 5605] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./26/binderfs") = 0 [pid 5073] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./26/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./26") = 0 [pid 5073] mkdir("./27", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5625 attached , child_tidptr=0x5555570a9690) = 84 [pid 5625] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5625] chdir("./27") = 0 [pid 5625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5625] setpgid(0, 0) = 0 [pid 5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5625] write(3, "1000", 4) = 4 [pid 5625] close(3) = 0 [pid 5625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5625] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5625] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5626 attached => {parent_tid=[85]}, 88) = 85 [pid 5626] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5626] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], [pid 5626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = 0 [pid 5625] <... futex resumed>) = 1 [pid 5625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5626] munmap(0x7f877d82c000, 138412032) = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5626] close(3) = 0 [pid 5626] mkdir("./file0", 0777) = 0 [ 116.893198][ T5626] loop0: detected capacity change from 0 to 32768 [ 116.908034][ T5626] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5626) [ 116.923146][ T5626] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 116.932515][ T5626] BTRFS info (device loop0): force clearing of disk cache [ 116.939699][ T5626] BTRFS info (device loop0): setting nodatasum [ 116.945946][ T5626] BTRFS info (device loop0): allowing degraded mounts [ 116.952725][ T5626] BTRFS info (device loop0): enabling disk space caching [ 116.960098][ T5626] BTRFS info (device loop0): disk space caching is enabled [ 116.981742][ T5626] BTRFS info (device loop0): enabling ssd optimizations [ 116.988714][ T5626] BTRFS info (device loop0): auto enabling async discard [ 116.996822][ T5626] BTRFS info (device loop0): rebuilding free space tree [ 117.009405][ T5626] BTRFS info (device loop0): disabling free space tree [ 117.016369][ T5626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.026031][ T5626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5626] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5626] chdir("./file0") = 0 [pid 5626] ioctl(4, LOOP_CLR_FD) = 0 [pid 5626] close(4) = 0 [pid 5626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = 0 [pid 5625] <... futex resumed>) = 1 [pid 5626] open("./file0", O_RDONLY [pid 5625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... open resumed>) = 4 [ 117.039744][ T5626] BTRFS info (device loop0): checking UUID tree [pid 5626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... ioctl resumed>) = 0 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5626] <... futex resumed>) = 0 [pid 5625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5625] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5625] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [ 117.112239][ T5626] BTRFS info (device loop0): balance: start -d -m [ 117.120747][ T5626] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 117.149338][ T5626] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5644 attached => {parent_tid=[86]}, 88) = 86 [pid 5644] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5644] <... rseq resumed>) = 0 [pid 5625] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] open("./file0", O_RDONLY) = 5 [pid 5644] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... futex resumed>) = 0 [pid 5625] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... futex resumed>) = 1 [ 117.200060][ T5626] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5644] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5644] <... ioctl resumed>) = 0 [pid 5644] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.288866][ T5626] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5644] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] close(3) = 0 [pid 5625] close(4) = 0 [pid 5625] close(5) = 0 [pid 5625] close(6) = -1 EBADF (Bad file descriptor) [pid 5625] close(7) = -1 EBADF (Bad file descriptor) [pid 5625] close(8) = -1 EBADF (Bad file descriptor) [pid 5625] close(9) = -1 EBADF (Bad file descriptor) [pid 5625] close(10) = -1 EBADF (Bad file descriptor) [pid 5625] close(11) = -1 EBADF (Bad file descriptor) [pid 5625] close(12) = -1 EBADF (Bad file descriptor) [pid 5625] close(13) = -1 EBADF (Bad file descriptor) [pid 5625] close(14) = -1 EBADF (Bad file descriptor) [pid 5625] close(15) = -1 EBADF (Bad file descriptor) [pid 5625] close(16) = -1 EBADF (Bad file descriptor) [ 117.352981][ T5626] BTRFS info (device loop0): balance: ended with status: 0 [pid 5625] close(17) = -1 EBADF (Bad file descriptor) [pid 5625] close(18) = -1 EBADF (Bad file descriptor) [pid 5625] close(19) = -1 EBADF (Bad file descriptor) [pid 5625] close(20) = -1 EBADF (Bad file descriptor) [pid 5625] close(21) = -1 EBADF (Bad file descriptor) [pid 5625] close(22) = -1 EBADF (Bad file descriptor) [pid 5625] close(23) = -1 EBADF (Bad file descriptor) [pid 5625] close(24) = -1 EBADF (Bad file descriptor) [pid 5625] close(25) = -1 EBADF (Bad file descriptor) [pid 5625] close(26) = -1 EBADF (Bad file descriptor) [pid 5625] close(27) = -1 EBADF (Bad file descriptor) [pid 5625] close(28) = -1 EBADF (Bad file descriptor) [pid 5625] close(29) = -1 EBADF (Bad file descriptor) [pid 5625] exit_group(0 [pid 5644] <... futex resumed>) = ? [pid 5626] <... futex resumed>) = ? [pid 5625] <... exit_group resumed>) = ? [pid 5644] +++ exited with 0 +++ [pid 5626] +++ exited with 0 +++ [pid 5625] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./27/binderfs") = 0 [pid 5073] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./27/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./27") = 0 [pid 5073] mkdir("./28", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5645 attached , child_tidptr=0x5555570a9690) = 87 [pid 5645] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5645] chdir("./28") = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5645] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5645] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5646 attached [pid 5646] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5646] set_robust_list(0x7f8785c4c9a0, 24 [pid 5645] <... clone3 resumed> => {parent_tid=[88]}, 88) = 88 [pid 5646] <... set_robust_list resumed>) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [], [pid 5646] rt_sigprocmask(SIG_SETMASK, [], [pid 5645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] memfd_create("syzkaller", 0 [pid 5645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5646] <... memfd_create resumed>) = 3 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5646] munmap(0x7f877d82c000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5646] close(3) = 0 [pid 5646] mkdir("./file0", 0777) = 0 [ 117.902564][ T5646] loop0: detected capacity change from 0 to 32768 [ 117.923474][ T5646] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5646) [ 117.939150][ T5646] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.948576][ T5646] BTRFS info (device loop0): force clearing of disk cache [ 117.955740][ T5646] BTRFS info (device loop0): setting nodatasum [ 117.961909][ T5646] BTRFS info (device loop0): allowing degraded mounts [ 117.968718][ T5646] BTRFS info (device loop0): enabling disk space caching [ 117.975785][ T5646] BTRFS info (device loop0): disk space caching is enabled [ 117.997775][ T5646] BTRFS info (device loop0): enabling ssd optimizations [ 118.004838][ T5646] BTRFS info (device loop0): auto enabling async discard [ 118.012742][ T5646] BTRFS info (device loop0): rebuilding free space tree [ 118.024840][ T5646] BTRFS info (device loop0): disabling free space tree [ 118.031732][ T5646] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.041458][ T5646] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5646] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5646] chdir("./file0") = 0 [pid 5646] ioctl(4, LOOP_CLR_FD) = 0 [pid 5646] close(4) = 0 [pid 5646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5645] <... futex resumed>) = 0 [pid 5646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] open("./file0", O_RDONLY [pid 5645] <... futex resumed>) = 0 [pid 5645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5646] <... open resumed>) = 4 [pid 5646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5645] <... futex resumed>) = 0 [pid 5645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5645] <... futex resumed>) = 0 [pid 5645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5646] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [ 118.054881][ T5646] BTRFS info (device loop0): checking UUID tree [pid 5646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5645] <... futex resumed>) = 0 [pid 5646] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.120925][ T5646] BTRFS info (device loop0): balance: start -d -m [ 118.130990][ T5646] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5645] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5645] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[89]}, 88) = 89 [pid 5645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5645] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5664 attached [pid 5664] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5664] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5664] open("./file0", O_RDONLY) = 5 [pid 5664] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5645] <... futex resumed>) = 0 [pid 5664] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5645] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5645] <... futex resumed>) = 0 [pid 5664] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 118.163229][ T5646] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5645] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5664] <... ioctl resumed>) = 0 [pid 5664] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5664] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 5646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] close(3 [pid 5646] <... futex resumed>) = 0 [pid 5645] <... close resumed>) = 0 [pid 5646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5645] close(4) = 0 [pid 5645] close(5) = 0 [pid 5645] close(6) = -1 EBADF (Bad file descriptor) [pid 5645] close(7) = -1 EBADF (Bad file descriptor) [pid 5645] close(8) = -1 EBADF (Bad file descriptor) [pid 5645] close(9) = -1 EBADF (Bad file descriptor) [pid 5645] close(10) = -1 EBADF (Bad file descriptor) [pid 5645] close(11) = -1 EBADF (Bad file descriptor) [ 118.301237][ T5646] BTRFS info (device loop0): 1 enospc errors during balance [ 118.308689][ T5646] BTRFS info (device loop0): balance: ended with status: -28 [pid 5645] close(12) = -1 EBADF (Bad file descriptor) [pid 5645] close(13) = -1 EBADF (Bad file descriptor) [pid 5645] close(14) = -1 EBADF (Bad file descriptor) [pid 5645] close(15) = -1 EBADF (Bad file descriptor) [pid 5645] close(16) = -1 EBADF (Bad file descriptor) [pid 5645] close(17) = -1 EBADF (Bad file descriptor) [pid 5645] close(18) = -1 EBADF (Bad file descriptor) [pid 5645] close(19) = -1 EBADF (Bad file descriptor) [pid 5645] close(20) = -1 EBADF (Bad file descriptor) [pid 5645] close(21) = -1 EBADF (Bad file descriptor) [pid 5645] close(22) = -1 EBADF (Bad file descriptor) [pid 5645] close(23) = -1 EBADF (Bad file descriptor) [pid 5645] close(24) = -1 EBADF (Bad file descriptor) [pid 5645] close(25) = -1 EBADF (Bad file descriptor) [pid 5645] close(26) = -1 EBADF (Bad file descriptor) [pid 5645] close(27) = -1 EBADF (Bad file descriptor) [pid 5645] close(28) = -1 EBADF (Bad file descriptor) [pid 5645] close(29) = -1 EBADF (Bad file descriptor) [pid 5645] exit_group(0 [pid 5664] <... futex resumed>) = ? [pid 5664] +++ exited with 0 +++ [pid 5646] <... futex resumed>) = ? [pid 5646] +++ exited with 0 +++ [pid 5645] <... exit_group resumed>) = ? [pid 5645] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=37 /* 0.37 s */} --- [pid 5073] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./28/binderfs") = 0 [pid 5073] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./28/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./28") = 0 [pid 5073] mkdir("./29", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5665 attached , child_tidptr=0x5555570a9690) = 90 [pid 5665] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5665] chdir("./29") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5665] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5666 attached [pid 5666] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5665] <... clone3 resumed> => {parent_tid=[91]}, 88) = 91 [pid 5666] set_robust_list(0x7f8785c4c9a0, 24 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], [pid 5666] <... set_robust_list resumed>) = 0 [pid 5665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], [pid 5665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5665] <... futex resumed>) = 0 [pid 5666] memfd_create("syzkaller", 0 [pid 5665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5666] <... memfd_create resumed>) = 3 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5666] munmap(0x7f877d82c000, 138412032) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5666] close(3) = 0 [pid 5666] mkdir("./file0", 0777) = 0 [ 118.950979][ T5666] loop0: detected capacity change from 0 to 32768 [ 118.976515][ T5666] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5666) [ 118.991829][ T5666] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 119.001133][ T5666] BTRFS info (device loop0): force clearing of disk cache [ 119.008277][ T5666] BTRFS info (device loop0): setting nodatasum [ 119.014497][ T5666] BTRFS info (device loop0): allowing degraded mounts [ 119.021263][ T5666] BTRFS info (device loop0): enabling disk space caching [ 119.028340][ T5666] BTRFS info (device loop0): disk space caching is enabled [ 119.050028][ T5666] BTRFS info (device loop0): enabling ssd optimizations [ 119.057068][ T5666] BTRFS info (device loop0): auto enabling async discard [ 119.065222][ T5666] BTRFS info (device loop0): rebuilding free space tree [ 119.077211][ T5666] BTRFS info (device loop0): disabling free space tree [ 119.084170][ T5666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5666] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5666] chdir("./file0") = 0 [pid 5666] ioctl(4, LOOP_CLR_FD) = 0 [pid 5666] close(4) = 0 [pid 5666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = 0 [pid 5666] <... futex resumed>) = 1 [pid 5665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] open("./file0", O_RDONLY [pid 5665] <... futex resumed>) = 0 [pid 5666] <... open resumed>) = 4 [pid 5665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5666] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = 0 [pid 5665] <... futex resumed>) = 1 [pid 5666] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 119.093795][ T5666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.107300][ T5666] BTRFS info (device loop0): checking UUID tree [ 119.153081][ T5666] BTRFS info (device loop0): balance: start -d -m [ 119.164786][ T5666] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5665] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5665] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[92]}, 88) = 92 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5684 attached [pid 5684] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5684] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] open("./file0", O_RDONLY) = 5 [pid 5684] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5684] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5684] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 119.194666][ T5666] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5684] <... ioctl resumed>) = 0 [pid 5684] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 119.367192][ T5666] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 119.392367][ T5666] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5684] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5666] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] close(3) = 0 [pid 5665] close(4) = 0 [pid 5665] close(5) = 0 [pid 5665] close(6) = -1 EBADF (Bad file descriptor) [pid 5665] close(7) = -1 EBADF (Bad file descriptor) [ 119.412337][ T5666] BTRFS info (device loop0): balance: ended with status: 0 [pid 5665] close(8) = -1 EBADF (Bad file descriptor) [pid 5665] close(9) = -1 EBADF (Bad file descriptor) [pid 5665] close(10) = -1 EBADF (Bad file descriptor) [pid 5665] close(11) = -1 EBADF (Bad file descriptor) [pid 5665] close(12) = -1 EBADF (Bad file descriptor) [pid 5665] close(13) = -1 EBADF (Bad file descriptor) [pid 5665] close(14) = -1 EBADF (Bad file descriptor) [pid 5665] close(15) = -1 EBADF (Bad file descriptor) [pid 5665] close(16) = -1 EBADF (Bad file descriptor) [pid 5665] close(17) = -1 EBADF (Bad file descriptor) [pid 5665] close(18) = -1 EBADF (Bad file descriptor) [pid 5665] close(19) = -1 EBADF (Bad file descriptor) [pid 5665] close(20) = -1 EBADF (Bad file descriptor) [pid 5665] close(21) = -1 EBADF (Bad file descriptor) [pid 5665] close(22) = -1 EBADF (Bad file descriptor) [pid 5665] close(23) = -1 EBADF (Bad file descriptor) [pid 5665] close(24) = -1 EBADF (Bad file descriptor) [pid 5665] close(25) = -1 EBADF (Bad file descriptor) [pid 5665] close(26) = -1 EBADF (Bad file descriptor) [pid 5665] close(27) = -1 EBADF (Bad file descriptor) [pid 5665] close(28) = -1 EBADF (Bad file descriptor) [pid 5665] close(29) = -1 EBADF (Bad file descriptor) [pid 5665] exit_group(0 [pid 5684] <... futex resumed>) = ? [pid 5666] <... futex resumed>) = ? [pid 5665] <... exit_group resumed>) = ? [pid 5684] +++ exited with 0 +++ [pid 5666] +++ exited with 0 +++ [pid 5665] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./29/binderfs") = 0 [pid 5073] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./29/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./29") = 0 [pid 5073] mkdir("./30", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5685 attached , child_tidptr=0x5555570a9690) = 93 [pid 5685] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5685] chdir("./30") = 0 [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5685] setpgid(0, 0) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5685] write(3, "1000", 4) = 4 [pid 5685] close(3) = 0 [pid 5685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5685] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5685] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5686 attached [pid 5686] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5686] set_robust_list(0x7f8785c4c9a0, 24 [pid 5685] <... clone3 resumed> => {parent_tid=[94]}, 88) = 94 [pid 5686] <... set_robust_list resumed>) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], [pid 5686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5686] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5685] <... futex resumed>) = 0 [pid 5686] memfd_create("syzkaller", 0 [pid 5685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5686] <... memfd_create resumed>) = 3 [pid 5686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5686] munmap(0x7f877d82c000, 138412032) = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5686] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5686] close(3) = 0 [pid 5686] mkdir("./file0", 0777) = 0 [ 120.050420][ T5686] loop0: detected capacity change from 0 to 32768 [ 120.074689][ T5686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5686) [ 120.089944][ T5686] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 120.099318][ T5686] BTRFS info (device loop0): force clearing of disk cache [ 120.106484][ T5686] BTRFS info (device loop0): setting nodatasum [ 120.112648][ T5686] BTRFS info (device loop0): allowing degraded mounts [ 120.119448][ T5686] BTRFS info (device loop0): enabling disk space caching [ 120.126496][ T5686] BTRFS info (device loop0): disk space caching is enabled [ 120.147707][ T5686] BTRFS info (device loop0): enabling ssd optimizations [ 120.154695][ T5686] BTRFS info (device loop0): auto enabling async discard [ 120.164181][ T5686] BTRFS info (device loop0): rebuilding free space tree [ 120.176373][ T5686] BTRFS info (device loop0): disabling free space tree [ 120.183262][ T5686] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5686] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5686] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5686] chdir("./file0") = 0 [pid 5686] ioctl(4, LOOP_CLR_FD) = 0 [pid 5686] close(4) = 0 [pid 5686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = 0 [pid 5686] <... futex resumed>) = 1 [pid 5685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] open("./file0", O_RDONLY [pid 5685] <... futex resumed>) = 0 [pid 5686] <... open resumed>) = 4 [pid 5685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5685] <... futex resumed>) = 0 [pid 5686] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... ioctl resumed>) = 0 [pid 5685] <... futex resumed>) = 0 [pid 5685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5686] <... futex resumed>) = 0 [pid 5686] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5686] <... futex resumed>) = 0 [ 120.193341][ T5686] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.207301][ T5686] BTRFS info (device loop0): checking UUID tree [ 120.263245][ T5686] BTRFS info (device loop0): balance: start -d -m [ 120.274699][ T5686] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5686] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5685] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5685] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5685] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[95]}, 88) = 95 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5704 attached [pid 5704] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5704] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5704] open("./file0", O_RDONLY) = 5 [pid 5704] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5685] <... futex resumed>) = 0 [pid 5704] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5685] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... futex resumed>) = 0 [pid 5685] <... futex resumed>) = 1 [pid 5704] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 120.304255][ T5686] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5685] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5704] <... ioctl resumed>) = 0 [pid 5704] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.461503][ T5686] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 120.485504][ T5686] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5704] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5686] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] close(3 [pid 5686] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5685] <... close resumed>) = 0 [pid 5685] close(4) = 0 [pid 5685] close(5) = 0 [pid 5685] close(6) = -1 EBADF (Bad file descriptor) [ 120.506586][ T5686] BTRFS info (device loop0): balance: ended with status: 0 [pid 5685] close(7) = -1 EBADF (Bad file descriptor) [pid 5685] close(8) = -1 EBADF (Bad file descriptor) [pid 5685] close(9) = -1 EBADF (Bad file descriptor) [pid 5685] close(10) = -1 EBADF (Bad file descriptor) [pid 5685] close(11) = -1 EBADF (Bad file descriptor) [pid 5685] close(12) = -1 EBADF (Bad file descriptor) [pid 5685] close(13) = -1 EBADF (Bad file descriptor) [pid 5685] close(14) = -1 EBADF (Bad file descriptor) [pid 5685] close(15) = -1 EBADF (Bad file descriptor) [pid 5685] close(16) = -1 EBADF (Bad file descriptor) [pid 5685] close(17) = -1 EBADF (Bad file descriptor) [pid 5685] close(18) = -1 EBADF (Bad file descriptor) [pid 5685] close(19) = -1 EBADF (Bad file descriptor) [pid 5685] close(20) = -1 EBADF (Bad file descriptor) [pid 5685] close(21) = -1 EBADF (Bad file descriptor) [pid 5685] close(22) = -1 EBADF (Bad file descriptor) [pid 5685] close(23) = -1 EBADF (Bad file descriptor) [pid 5685] close(24) = -1 EBADF (Bad file descriptor) [pid 5685] close(25) = -1 EBADF (Bad file descriptor) [pid 5685] close(26) = -1 EBADF (Bad file descriptor) [pid 5685] close(27) = -1 EBADF (Bad file descriptor) [pid 5685] close(28) = -1 EBADF (Bad file descriptor) [pid 5685] close(29) = -1 EBADF (Bad file descriptor) [pid 5685] exit_group(0 [pid 5704] <... futex resumed>) = ? [pid 5704] +++ exited with 0 +++ [pid 5686] <... futex resumed>) = ? [pid 5685] <... exit_group resumed>) = ? [pid 5686] +++ exited with 0 +++ [pid 5685] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=45 /* 0.45 s */} --- [pid 5073] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./30/binderfs") = 0 [pid 5073] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./30/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./30") = 0 [pid 5073] mkdir("./31", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5705 attached , child_tidptr=0x5555570a9690) = 96 [pid 5705] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5705] chdir("./31") = 0 [pid 5705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5705] setpgid(0, 0) = 0 [pid 5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5705] write(3, "1000", 4) = 4 [pid 5705] close(3) = 0 [pid 5705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5705] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5705] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5706 attached => {parent_tid=[97]}, 88) = 97 [pid 5705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5706] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5706] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5706] memfd_create("syzkaller", 0) = 3 [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5706] munmap(0x7f877d82c000, 138412032) = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5706] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5706] close(3) = 0 [pid 5706] mkdir("./file0", 0777) = 0 [ 121.219646][ T5706] loop0: detected capacity change from 0 to 32768 [ 121.246306][ T5706] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5706) [ 121.262370][ T5706] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 121.272100][ T5706] BTRFS info (device loop0): force clearing of disk cache [ 121.279252][ T5706] BTRFS info (device loop0): setting nodatasum [ 121.285734][ T5706] BTRFS info (device loop0): allowing degraded mounts [ 121.292504][ T5706] BTRFS info (device loop0): enabling disk space caching [ 121.299596][ T5706] BTRFS info (device loop0): disk space caching is enabled [ 121.320918][ T5706] BTRFS info (device loop0): enabling ssd optimizations [ 121.327934][ T5706] BTRFS info (device loop0): auto enabling async discard [ 121.335998][ T5706] BTRFS info (device loop0): rebuilding free space tree [ 121.347971][ T5706] BTRFS info (device loop0): disabling free space tree [ 121.354923][ T5706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5706] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5706] chdir("./file0") = 0 [pid 5706] ioctl(4, LOOP_CLR_FD) = 0 [pid 5706] close(4) = 0 [pid 5706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] <... futex resumed>) = 0 [pid 5705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] <... futex resumed>) = 0 [pid 5705] <... futex resumed>) = 1 [pid 5706] open("./file0", O_RDONLY [pid 5705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5706] <... open resumed>) = 4 [pid 5706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] <... futex resumed>) = 0 [pid 5705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] <... futex resumed>) = 0 [pid 5706] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5706] <... ioctl resumed>) = 0 [pid 5706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 121.364621][ T5706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.377845][ T5706] BTRFS info (device loop0): checking UUID tree [pid 5705] <... futex resumed>) = 0 [pid 5706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5706] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5705] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5705] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[98]}, 88) = 98 [pid 5705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5705] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5724 attached [pid 5724] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5724] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] open("./file0", O_RDONLY) = 5 [pid 5724] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5705] <... futex resumed>) = 0 [pid 5724] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] <... futex resumed>) = 0 [pid 5724] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 121.455437][ T5706] BTRFS info (device loop0): balance: start -d -m [ 121.466118][ T5706] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 121.490011][ T5706] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5724] <... ioctl resumed>) = 0 [pid 5724] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 121.648613][ T5706] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 121.673640][ T5706] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5724] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5705] close(3 [pid 5706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] <... close resumed>) = 0 [pid 5705] close(4) = 0 [pid 5705] close(5) = 0 [pid 5705] close(6) = -1 EBADF (Bad file descriptor) [pid 5705] close(7) = -1 EBADF (Bad file descriptor) [pid 5705] close(8) = -1 EBADF (Bad file descriptor) [pid 5705] close(9) = -1 EBADF (Bad file descriptor) [pid 5705] close(10) = -1 EBADF (Bad file descriptor) [pid 5705] close(11) = -1 EBADF (Bad file descriptor) [ 121.692725][ T5706] BTRFS info (device loop0): balance: ended with status: 0 [pid 5705] close(12) = -1 EBADF (Bad file descriptor) [pid 5705] close(13) = -1 EBADF (Bad file descriptor) [pid 5705] close(14) = -1 EBADF (Bad file descriptor) [pid 5705] close(15) = -1 EBADF (Bad file descriptor) [pid 5705] close(16) = -1 EBADF (Bad file descriptor) [pid 5705] close(17) = -1 EBADF (Bad file descriptor) [pid 5705] close(18) = -1 EBADF (Bad file descriptor) [pid 5705] close(19) = -1 EBADF (Bad file descriptor) [pid 5705] close(20) = -1 EBADF (Bad file descriptor) [pid 5705] close(21) = -1 EBADF (Bad file descriptor) [pid 5705] close(22) = -1 EBADF (Bad file descriptor) [pid 5705] close(23) = -1 EBADF (Bad file descriptor) [pid 5705] close(24) = -1 EBADF (Bad file descriptor) [pid 5705] close(25) = -1 EBADF (Bad file descriptor) [pid 5705] close(26) = -1 EBADF (Bad file descriptor) [pid 5705] close(27) = -1 EBADF (Bad file descriptor) [pid 5705] close(28) = -1 EBADF (Bad file descriptor) [pid 5705] close(29) = -1 EBADF (Bad file descriptor) [pid 5705] exit_group(0 [pid 5706] <... futex resumed>) = ? [pid 5705] <... exit_group resumed>) = ? [pid 5706] +++ exited with 0 +++ [pid 5724] <... futex resumed>) = ? [pid 5724] +++ exited with 0 +++ [pid 5705] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./31/binderfs") = 0 [pid 5073] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./31/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./31") = 0 [pid 5073] mkdir("./32", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5725 attached , child_tidptr=0x5555570a9690) = 99 [pid 5725] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5725] chdir("./32") = 0 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5725] setpgid(0, 0) = 0 [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5725] write(3, "1000", 4) = 4 [pid 5725] close(3) = 0 [pid 5725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5725] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5725] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5726 attached [pid 5726] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5725] <... clone3 resumed> => {parent_tid=[100]}, 88) = 100 [pid 5726] <... rseq resumed>) = 0 [pid 5725] rt_sigprocmask(SIG_SETMASK, [], [pid 5726] set_robust_list(0x7f8785c4c9a0, 24 [pid 5725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5726] <... set_robust_list resumed>) = 0 [pid 5725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5725] <... futex resumed>) = 0 [pid 5726] memfd_create("syzkaller", 0 [pid 5725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5726] <... memfd_create resumed>) = 3 [pid 5726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5726] munmap(0x7f877d82c000, 138412032) = 0 [pid 5726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5726] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5726] close(3) = 0 [pid 5726] mkdir("./file0", 0777) = 0 [ 122.315436][ T5726] loop0: detected capacity change from 0 to 32768 [ 122.335324][ T5726] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5726) [ 122.351218][ T5726] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.360707][ T5726] BTRFS info (device loop0): force clearing of disk cache [ 122.367859][ T5726] BTRFS info (device loop0): setting nodatasum [ 122.374074][ T5726] BTRFS info (device loop0): allowing degraded mounts [ 122.380842][ T5726] BTRFS info (device loop0): enabling disk space caching [ 122.387892][ T5726] BTRFS info (device loop0): disk space caching is enabled [ 122.410208][ T5726] BTRFS info (device loop0): enabling ssd optimizations [ 122.417201][ T5726] BTRFS info (device loop0): auto enabling async discard [ 122.425306][ T5726] BTRFS info (device loop0): rebuilding free space tree [ 122.437409][ T5726] BTRFS info (device loop0): disabling free space tree [ 122.444403][ T5726] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.454063][ T5726] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5726] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5726] chdir("./file0") = 0 [pid 5726] ioctl(4, LOOP_CLR_FD) = 0 [pid 5726] close(4) = 0 [pid 5726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] <... futex resumed>) = 0 [pid 5725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] <... futex resumed>) = 0 [pid 5725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] open("./file0", O_RDONLY) = 4 [pid 5726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] <... futex resumed>) = 0 [pid 5725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5726] <... futex resumed>) = 0 [pid 5726] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [ 122.467317][ T5726] BTRFS info (device loop0): checking UUID tree [pid 5725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] <... ioctl resumed>) = 0 [pid 5726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5726] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5725] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5725] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5744 attached [pid 5744] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5725] <... clone3 resumed> => {parent_tid=[101]}, 88) = 101 [pid 5744] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5725] rt_sigprocmask(SIG_SETMASK, [], [pid 5744] rt_sigprocmask(SIG_SETMASK, [], [pid 5725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5744] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5725] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5744] open("./file0", O_RDONLY) = 5 [pid 5744] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5744] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5744] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5725] <... futex resumed>) = 0 [ 122.536162][ T5726] BTRFS info (device loop0): balance: start -d -m [ 122.548085][ T5726] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 122.574969][ T5726] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5725] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5744] <... ioctl resumed>) = 0 [pid 5744] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.719079][ T5726] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 122.745534][ T5726] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5744] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5726] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] close(3) = 0 [pid 5725] close(4) = 0 [pid 5725] close(5) = 0 [pid 5725] close(6) = -1 EBADF (Bad file descriptor) [pid 5725] close(7) = -1 EBADF (Bad file descriptor) [ 122.764166][ T5726] BTRFS info (device loop0): balance: ended with status: 0 [pid 5725] close(8) = -1 EBADF (Bad file descriptor) [pid 5725] close(9) = -1 EBADF (Bad file descriptor) [pid 5725] close(10) = -1 EBADF (Bad file descriptor) [pid 5725] close(11) = -1 EBADF (Bad file descriptor) [pid 5725] close(12) = -1 EBADF (Bad file descriptor) [pid 5725] close(13) = -1 EBADF (Bad file descriptor) [pid 5725] close(14) = -1 EBADF (Bad file descriptor) [pid 5725] close(15) = -1 EBADF (Bad file descriptor) [pid 5725] close(16) = -1 EBADF (Bad file descriptor) [pid 5725] close(17) = -1 EBADF (Bad file descriptor) [pid 5725] close(18) = -1 EBADF (Bad file descriptor) [pid 5725] close(19) = -1 EBADF (Bad file descriptor) [pid 5725] close(20) = -1 EBADF (Bad file descriptor) [pid 5725] close(21) = -1 EBADF (Bad file descriptor) [pid 5725] close(22) = -1 EBADF (Bad file descriptor) [pid 5725] close(23) = -1 EBADF (Bad file descriptor) [pid 5725] close(24) = -1 EBADF (Bad file descriptor) [pid 5725] close(25) = -1 EBADF (Bad file descriptor) [pid 5725] close(26) = -1 EBADF (Bad file descriptor) [pid 5725] close(27) = -1 EBADF (Bad file descriptor) [pid 5725] close(28) = -1 EBADF (Bad file descriptor) [pid 5725] close(29) = -1 EBADF (Bad file descriptor) [pid 5725] exit_group(0 [pid 5744] <... futex resumed>) = ? [pid 5726] <... futex resumed>) = ? [pid 5725] <... exit_group resumed>) = ? [pid 5744] +++ exited with 0 +++ [pid 5726] +++ exited with 0 +++ [pid 5725] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./32/binderfs") = 0 [pid 5073] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./32/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./32") = 0 [pid 5073] mkdir("./33", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5745 attached , child_tidptr=0x5555570a9690) = 102 [pid 5745] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5745] chdir("./33") = 0 [pid 5745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5745] setpgid(0, 0) = 0 [pid 5745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5745] write(3, "1000", 4) = 4 [pid 5745] close(3) = 0 [pid 5745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5745] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5745] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5746 attached [pid 5746] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5746] set_robust_list(0x7f8785c4c9a0, 24 [pid 5745] <... clone3 resumed> => {parent_tid=[103]}, 88) = 103 [pid 5746] <... set_robust_list resumed>) = 0 [pid 5746] rt_sigprocmask(SIG_SETMASK, [], [pid 5745] rt_sigprocmask(SIG_SETMASK, [], [pid 5746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5746] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5745] <... futex resumed>) = 0 [pid 5746] memfd_create("syzkaller", 0 [pid 5745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5746] <... memfd_create resumed>) = 3 [pid 5746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5746] munmap(0x7f877d82c000, 138412032) = 0 [pid 5746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5746] close(3) = 0 [pid 5746] mkdir("./file0", 0777) = 0 [ 123.373290][ T5746] loop0: detected capacity change from 0 to 32768 [ 123.392878][ T5746] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5746) [ 123.408020][ T5746] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.417304][ T5746] BTRFS info (device loop0): force clearing of disk cache [ 123.424491][ T5746] BTRFS info (device loop0): setting nodatasum [ 123.430661][ T5746] BTRFS info (device loop0): allowing degraded mounts [ 123.437487][ T5746] BTRFS info (device loop0): enabling disk space caching [ 123.444609][ T5746] BTRFS info (device loop0): disk space caching is enabled [ 123.466556][ T5746] BTRFS info (device loop0): enabling ssd optimizations [ 123.473512][ T5746] BTRFS info (device loop0): auto enabling async discard [ 123.481550][ T5746] BTRFS info (device loop0): rebuilding free space tree [ 123.493413][ T5746] BTRFS info (device loop0): disabling free space tree [ 123.500428][ T5746] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.510108][ T5746] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5746] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5746] chdir("./file0") = 0 [pid 5746] ioctl(4, LOOP_CLR_FD) = 0 [pid 5746] close(4) = 0 [pid 5746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... futex resumed>) = 1 [pid 5745] <... futex resumed>) = 0 [pid 5746] open("./file0", O_RDONLY [pid 5745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5746] <... open resumed>) = 4 [pid 5746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... futex resumed>) = 1 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5746] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [ 123.523294][ T5746] BTRFS info (device loop0): checking UUID tree [pid 5746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5745] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5745] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[104]}, 88) = 104 [pid 5745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5745] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5764 attached [pid 5764] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5764] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5764] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5764] open("./file0", O_RDONLY) = 5 [pid 5764] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = 0 [pid 5745] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5764] <... futex resumed>) = 1 [ 123.598158][ T5746] BTRFS info (device loop0): balance: start -d -m [ 123.607601][ T5746] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 123.635397][ T5746] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5764] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 123.723760][ T5746] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5764] <... ioctl resumed>) = 0 [pid 5764] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5764] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] close(3 [pid 5746] <... futex resumed>) = 0 [pid 5745] <... close resumed>) = 0 [pid 5746] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5745] close(4) = 0 [pid 5745] close(5) = 0 [pid 5745] close(6) = -1 EBADF (Bad file descriptor) [pid 5745] close(7) = -1 EBADF (Bad file descriptor) [pid 5745] close(8) = -1 EBADF (Bad file descriptor) [pid 5745] close(9) = -1 EBADF (Bad file descriptor) [pid 5745] close(10) = -1 EBADF (Bad file descriptor) [pid 5745] close(11) = -1 EBADF (Bad file descriptor) [pid 5745] close(12) = -1 EBADF (Bad file descriptor) [pid 5745] close(13) = -1 EBADF (Bad file descriptor) [ 123.806166][ T5746] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 123.825068][ T5746] BTRFS info (device loop0): balance: ended with status: 0 [pid 5745] close(14) = -1 EBADF (Bad file descriptor) [pid 5745] close(15) = -1 EBADF (Bad file descriptor) [pid 5745] close(16) = -1 EBADF (Bad file descriptor) [pid 5745] close(17) = -1 EBADF (Bad file descriptor) [pid 5745] close(18) = -1 EBADF (Bad file descriptor) [pid 5745] close(19) = -1 EBADF (Bad file descriptor) [pid 5745] close(20) = -1 EBADF (Bad file descriptor) [pid 5745] close(21) = -1 EBADF (Bad file descriptor) [pid 5745] close(22) = -1 EBADF (Bad file descriptor) [pid 5745] close(23) = -1 EBADF (Bad file descriptor) [pid 5745] close(24) = -1 EBADF (Bad file descriptor) [pid 5745] close(25) = -1 EBADF (Bad file descriptor) [pid 5745] close(26) = -1 EBADF (Bad file descriptor) [pid 5745] close(27) = -1 EBADF (Bad file descriptor) [pid 5745] close(28) = -1 EBADF (Bad file descriptor) [pid 5745] close(29) = -1 EBADF (Bad file descriptor) [pid 5745] exit_group(0 [pid 5746] <... futex resumed>) = ? [pid 5745] <... exit_group resumed>) = ? [pid 5764] <... futex resumed>) = ? [pid 5746] +++ exited with 0 +++ [pid 5764] +++ exited with 0 +++ [pid 5745] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./33/binderfs") = 0 [pid 5073] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./33/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./33") = 0 [pid 5073] mkdir("./34", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5765 attached [pid 5765] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 105 [pid 5765] <... set_robust_list resumed>) = 0 [pid 5765] chdir("./34") = 0 [pid 5765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5765] setpgid(0, 0) = 0 [pid 5765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5765] write(3, "1000", 4) = 4 [pid 5765] close(3) = 0 [pid 5765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5765] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5765] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5766 attached [pid 5766] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5766] set_robust_list(0x7f8785c4c9a0, 24 [pid 5765] <... clone3 resumed> => {parent_tid=[106]}, 88) = 106 [pid 5766] <... set_robust_list resumed>) = 0 [pid 5766] rt_sigprocmask(SIG_SETMASK, [], [pid 5765] rt_sigprocmask(SIG_SETMASK, [], [pid 5766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5766] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5765] <... futex resumed>) = 0 [pid 5766] memfd_create("syzkaller", 0 [pid 5765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5766] <... memfd_create resumed>) = 3 [pid 5766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5766] munmap(0x7f877d82c000, 138412032) = 0 [pid 5766] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5766] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5766] close(3) = 0 [pid 5766] mkdir("./file0", 0777) = 0 [ 124.578067][ T5766] loop0: detected capacity change from 0 to 32768 [ 124.598511][ T5766] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5766) [ 124.614097][ T5766] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.623347][ T5766] BTRFS info (device loop0): force clearing of disk cache [ 124.630502][ T5766] BTRFS info (device loop0): setting nodatasum [ 124.636703][ T5766] BTRFS info (device loop0): allowing degraded mounts [ 124.643465][ T5766] BTRFS info (device loop0): enabling disk space caching [ 124.650553][ T5766] BTRFS info (device loop0): disk space caching is enabled [ 124.672027][ T5766] BTRFS info (device loop0): enabling ssd optimizations [ 124.679009][ T5766] BTRFS info (device loop0): auto enabling async discard [ 124.687174][ T5766] BTRFS info (device loop0): rebuilding free space tree [ 124.699706][ T5766] BTRFS info (device loop0): disabling free space tree [ 124.706870][ T5766] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.716660][ T5766] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5766] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5766] chdir("./file0") = 0 [pid 5766] ioctl(4, LOOP_CLR_FD) = 0 [pid 5766] close(4) = 0 [ 124.730309][ T5766] BTRFS info (device loop0): checking UUID tree [pid 5766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5765] <... futex resumed>) = 0 [pid 5765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] open("./file0", O_RDONLY) = 4 [pid 5765] <... futex resumed>) = 0 [pid 5766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5766] <... futex resumed>) = 0 [pid 5766] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... futex resumed>) = 0 [pid 5765] <... futex resumed>) = 1 [pid 5766] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5766] <... ioctl resumed>) = 0 [pid 5766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5765] <... futex resumed>) = 0 [pid 5765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5766] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 124.841462][ T5766] BTRFS info (device loop0): balance: start -d -m [ 124.852862][ T5766] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5765] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5765] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[107]}, 88) = 107 [pid 5765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5765] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5784 attached [pid 5784] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5784] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5765] <... futex resumed>) = 0 [pid 5784] open("./file0", O_RDONLY) = 5 [pid 5765] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5784] <... futex resumed>) = 0 [pid 5765] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5765] <... futex resumed>) = 0 [ 124.885895][ T5766] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5765] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5784] <... ioctl resumed>) = 0 [pid 5784] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 125.022031][ T5766] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 125.045852][ T5766] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5784] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5766] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] close(3 [pid 5766] <... futex resumed>) = 0 [pid 5765] <... close resumed>) = 0 [pid 5766] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5765] close(4) = 0 [pid 5765] close(5) = 0 [pid 5765] close(6) = -1 EBADF (Bad file descriptor) [pid 5765] close(7) = -1 EBADF (Bad file descriptor) [pid 5765] close(8) = -1 EBADF (Bad file descriptor) [pid 5765] close(9) = -1 EBADF (Bad file descriptor) [pid 5765] close(10) = -1 EBADF (Bad file descriptor) [ 125.065306][ T5766] BTRFS info (device loop0): balance: ended with status: 0 [pid 5765] close(11) = -1 EBADF (Bad file descriptor) [pid 5765] close(12) = -1 EBADF (Bad file descriptor) [pid 5765] close(13) = -1 EBADF (Bad file descriptor) [pid 5765] close(14) = -1 EBADF (Bad file descriptor) [pid 5765] close(15) = -1 EBADF (Bad file descriptor) [pid 5765] close(16) = -1 EBADF (Bad file descriptor) [pid 5765] close(17) = -1 EBADF (Bad file descriptor) [pid 5765] close(18) = -1 EBADF (Bad file descriptor) [pid 5765] close(19) = -1 EBADF (Bad file descriptor) [pid 5765] close(20) = -1 EBADF (Bad file descriptor) [pid 5765] close(21) = -1 EBADF (Bad file descriptor) [pid 5765] close(22) = -1 EBADF (Bad file descriptor) [pid 5765] close(23) = -1 EBADF (Bad file descriptor) [pid 5765] close(24) = -1 EBADF (Bad file descriptor) [pid 5765] close(25) = -1 EBADF (Bad file descriptor) [pid 5765] close(26) = -1 EBADF (Bad file descriptor) [pid 5765] close(27) = -1 EBADF (Bad file descriptor) [pid 5765] close(28) = -1 EBADF (Bad file descriptor) [pid 5765] close(29) = -1 EBADF (Bad file descriptor) [pid 5765] exit_group(0 [pid 5766] <... futex resumed>) = ? [pid 5784] <... futex resumed>) = ? [pid 5766] +++ exited with 0 +++ [pid 5765] <... exit_group resumed>) = ? [pid 5784] +++ exited with 0 +++ [pid 5765] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=105, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./34/binderfs") = 0 [pid 5073] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./34/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./34") = 0 [pid 5073] mkdir("./35", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5785 attached , child_tidptr=0x5555570a9690) = 108 [pid 5785] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5785] chdir("./35") = 0 [pid 5785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5785] setpgid(0, 0) = 0 [pid 5785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5785] write(3, "1000", 4) = 4 [pid 5785] close(3) = 0 [pid 5785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5785] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5785] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5786 attached [pid 5786] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5785] <... clone3 resumed> => {parent_tid=[109]}, 88) = 109 [pid 5786] <... rseq resumed>) = 0 [pid 5785] rt_sigprocmask(SIG_SETMASK, [], [pid 5786] set_robust_list(0x7f8785c4c9a0, 24 [pid 5785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5786] <... set_robust_list resumed>) = 0 [pid 5785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5785] <... futex resumed>) = 0 [pid 5785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5786] memfd_create("syzkaller", 0) = 3 [pid 5786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5786] munmap(0x7f877d82c000, 138412032) = 0 [pid 5786] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5786] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5786] close(3) = 0 [pid 5786] mkdir("./file0", 0777) = 0 [ 125.715990][ T5786] loop0: detected capacity change from 0 to 32768 [ 125.735505][ T5786] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5786) [ 125.751587][ T5786] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.761099][ T5786] BTRFS info (device loop0): force clearing of disk cache [ 125.768568][ T5786] BTRFS info (device loop0): setting nodatasum [ 125.774950][ T5786] BTRFS info (device loop0): allowing degraded mounts [ 125.781717][ T5786] BTRFS info (device loop0): enabling disk space caching [ 125.788951][ T5786] BTRFS info (device loop0): disk space caching is enabled [ 125.811004][ T5786] BTRFS info (device loop0): enabling ssd optimizations [ 125.817998][ T5786] BTRFS info (device loop0): auto enabling async discard [ 125.826211][ T5786] BTRFS info (device loop0): rebuilding free space tree [ 125.838382][ T5786] BTRFS info (device loop0): disabling free space tree [ 125.845357][ T5786] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.855025][ T5786] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5786] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5786] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5786] chdir("./file0") = 0 [pid 5786] ioctl(4, LOOP_CLR_FD) = 0 [pid 5786] close(4) = 0 [pid 5786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5786] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] <... futex resumed>) = 0 [pid 5785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] <... futex resumed>) = 0 [pid 5785] <... futex resumed>) = 1 [pid 5785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5786] open("./file0", O_RDONLY) = 4 [pid 5786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5785] <... futex resumed>) = 0 [pid 5785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5785] <... futex resumed>) = 0 [pid 5786] <... ioctl resumed>) = 0 [ 125.867910][ T5786] BTRFS info (device loop0): checking UUID tree [pid 5785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5785] <... futex resumed>) = 0 [pid 5785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5785] <... futex resumed>) = 0 [ 125.955830][ T5786] BTRFS info (device loop0): balance: start -d -m [ 125.964500][ T5786] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5785] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5785] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[110]}, 88) = 110 [pid 5785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5785] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5785] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5804 attached [pid 5804] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5804] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5804] open("./file0", O_RDONLY) = 5 [pid 5804] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5785] <... futex resumed>) = 0 [pid 5804] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5785] <... futex resumed>) = 0 [pid 5785] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.002806][ T5786] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5804] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5804] <... ioctl resumed>) = 0 [pid 5804] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5804] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5786] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5786] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] close(3) = 0 [pid 5785] close(4) = 0 [pid 5785] close(5) = 0 [pid 5785] close(6) = -1 EBADF (Bad file descriptor) [pid 5785] close(7) = -1 EBADF (Bad file descriptor) [pid 5785] close(8) = -1 EBADF (Bad file descriptor) [pid 5785] close(9) = -1 EBADF (Bad file descriptor) [ 126.146329][ T5786] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 126.169469][ T5786] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 126.188582][ T5786] BTRFS info (device loop0): balance: ended with status: 0 [pid 5785] close(10) = -1 EBADF (Bad file descriptor) [pid 5785] close(11) = -1 EBADF (Bad file descriptor) [pid 5785] close(12) = -1 EBADF (Bad file descriptor) [pid 5785] close(13) = -1 EBADF (Bad file descriptor) [pid 5785] close(14) = -1 EBADF (Bad file descriptor) [pid 5785] close(15) = -1 EBADF (Bad file descriptor) [pid 5785] close(16) = -1 EBADF (Bad file descriptor) [pid 5785] close(17) = -1 EBADF (Bad file descriptor) [pid 5785] close(18) = -1 EBADF (Bad file descriptor) [pid 5785] close(19) = -1 EBADF (Bad file descriptor) [pid 5785] close(20) = -1 EBADF (Bad file descriptor) [pid 5785] close(21) = -1 EBADF (Bad file descriptor) [pid 5785] close(22) = -1 EBADF (Bad file descriptor) [pid 5785] close(23) = -1 EBADF (Bad file descriptor) [pid 5785] close(24) = -1 EBADF (Bad file descriptor) [pid 5785] close(25) = -1 EBADF (Bad file descriptor) [pid 5785] close(26) = -1 EBADF (Bad file descriptor) [pid 5785] close(27) = -1 EBADF (Bad file descriptor) [pid 5785] close(28) = -1 EBADF (Bad file descriptor) [pid 5785] close(29) = -1 EBADF (Bad file descriptor) [pid 5785] exit_group(0 [pid 5786] <... futex resumed>) = ? [pid 5785] <... exit_group resumed>) = ? [pid 5804] <... futex resumed>) = ? [pid 5786] +++ exited with 0 +++ [pid 5804] +++ exited with 0 +++ [pid 5785] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./35/binderfs") = 0 [pid 5073] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./35/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./35") = 0 [pid 5073] mkdir("./36", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570a9690) = 111 ./strace-static-x86_64: Process 5805 attached [pid 5805] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5805] chdir("./36") = 0 [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5805] setpgid(0, 0) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5805] write(3, "1000", 4) = 4 [pid 5805] close(3) = 0 [pid 5805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5805] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5805] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5806 attached [pid 5806] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5805] <... clone3 resumed> => {parent_tid=[112]}, 88) = 112 [pid 5806] <... rseq resumed>) = 0 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], [pid 5806] set_robust_list(0x7f8785c4c9a0, 24 [pid 5805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5806] <... set_robust_list resumed>) = 0 [pid 5805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] rt_sigprocmask(SIG_SETMASK, [], [pid 5805] <... futex resumed>) = 0 [pid 5806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5806] memfd_create("syzkaller", 0) = 3 [pid 5806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5806] munmap(0x7f877d82c000, 138412032) = 0 [pid 5806] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5806] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5806] close(3) = 0 [pid 5806] mkdir("./file0", 0777) = 0 [ 126.781411][ T5806] loop0: detected capacity change from 0 to 32768 [ 126.808338][ T5806] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5806) [ 126.824110][ T5806] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.833367][ T5806] BTRFS info (device loop0): force clearing of disk cache [ 126.840624][ T5806] BTRFS info (device loop0): setting nodatasum [ 126.846975][ T5806] BTRFS info (device loop0): allowing degraded mounts [ 126.853746][ T5806] BTRFS info (device loop0): enabling disk space caching [ 126.861083][ T5806] BTRFS info (device loop0): disk space caching is enabled [ 126.884253][ T5806] BTRFS info (device loop0): enabling ssd optimizations [ 126.891208][ T5806] BTRFS info (device loop0): auto enabling async discard [ 126.899127][ T5806] BTRFS info (device loop0): rebuilding free space tree [ 126.911264][ T5806] BTRFS info (device loop0): disabling free space tree [ 126.918263][ T5806] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5806] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5806] chdir("./file0") = 0 [pid 5806] ioctl(4, LOOP_CLR_FD) = 0 [pid 5806] close(4) = 0 [ 126.927956][ T5806] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.941046][ T5806] BTRFS info (device loop0): checking UUID tree [pid 5806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5806] open("./file0", O_RDONLY [pid 5805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... open resumed>) = 4 [pid 5806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5806] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5805] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5805] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5824 attached => {parent_tid=[113]}, 88) = 113 [pid 5824] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], [pid 5824] <... rseq resumed>) = 0 [pid 5805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5824] set_robust_list(0x7f8785c2b9a0, 24 [pid 5805] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] <... set_robust_list resumed>) = 0 [pid 5824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5824] open("./file0", O_RDONLY [pid 5805] <... futex resumed>) = 0 [pid 5824] <... open resumed>) = 5 [pid 5805] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 5805] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5805] <... futex resumed>) = 0 [ 127.030872][ T5806] BTRFS info (device loop0): balance: start -d -m [ 127.039297][ T5806] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 127.063658][ T5806] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5805] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5824] <... ioctl resumed>) = 0 [pid 5824] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 127.224769][ T5806] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 127.251020][ T5806] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5824] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] close(3 [pid 5806] <... futex resumed>) = 0 [pid 5805] <... close resumed>) = 0 [pid 5806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] close(4) = 0 [pid 5805] close(5) = 0 [pid 5805] close(6) = -1 EBADF (Bad file descriptor) [pid 5805] close(7) = -1 EBADF (Bad file descriptor) [pid 5805] close(8) = -1 EBADF (Bad file descriptor) [pid 5805] close(9) = -1 EBADF (Bad file descriptor) [pid 5805] close(10) = -1 EBADF (Bad file descriptor) [ 127.271861][ T5806] BTRFS info (device loop0): balance: ended with status: 0 [pid 5805] close(11) = -1 EBADF (Bad file descriptor) [pid 5805] close(12) = -1 EBADF (Bad file descriptor) [pid 5805] close(13) = -1 EBADF (Bad file descriptor) [pid 5805] close(14) = -1 EBADF (Bad file descriptor) [pid 5805] close(15) = -1 EBADF (Bad file descriptor) [pid 5805] close(16) = -1 EBADF (Bad file descriptor) [pid 5805] close(17) = -1 EBADF (Bad file descriptor) [pid 5805] close(18) = -1 EBADF (Bad file descriptor) [pid 5805] close(19) = -1 EBADF (Bad file descriptor) [pid 5805] close(20) = -1 EBADF (Bad file descriptor) [pid 5805] close(21) = -1 EBADF (Bad file descriptor) [pid 5805] close(22) = -1 EBADF (Bad file descriptor) [pid 5805] close(23) = -1 EBADF (Bad file descriptor) [pid 5805] close(24) = -1 EBADF (Bad file descriptor) [pid 5805] close(25) = -1 EBADF (Bad file descriptor) [pid 5805] close(26) = -1 EBADF (Bad file descriptor) [pid 5805] close(27) = -1 EBADF (Bad file descriptor) [pid 5805] close(28) = -1 EBADF (Bad file descriptor) [pid 5805] close(29) = -1 EBADF (Bad file descriptor) [pid 5805] exit_group(0 [pid 5824] <... futex resumed>) = ? [pid 5824] +++ exited with 0 +++ [pid 5806] <... futex resumed>) = ? [pid 5805] <... exit_group resumed>) = ? [pid 5806] +++ exited with 0 +++ [pid 5805] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=111, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./36/binderfs") = 0 [pid 5073] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./36/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./36") = 0 [pid 5073] mkdir("./37", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5825 attached , child_tidptr=0x5555570a9690) = 114 [pid 5825] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5825] chdir("./37") = 0 [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] setpgid(0, 0) = 0 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] write(3, "1000", 4) = 4 [pid 5825] close(3) = 0 [pid 5825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5825] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5825] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5826 attached [pid 5826] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5826] set_robust_list(0x7f8785c4c9a0, 24 [pid 5825] <... clone3 resumed> => {parent_tid=[115]}, 88) = 115 [pid 5826] <... set_robust_list resumed>) = 0 [pid 5825] rt_sigprocmask(SIG_SETMASK, [], [pid 5826] rt_sigprocmask(SIG_SETMASK, [], [pid 5825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] memfd_create("syzkaller", 0 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5826] <... memfd_create resumed>) = 3 [pid 5826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5826] munmap(0x7f877d82c000, 138412032) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5826] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5826] close(3) = 0 [pid 5826] mkdir("./file0", 0777) = 0 [ 127.861004][ T5826] loop0: detected capacity change from 0 to 32768 [ 127.886266][ T5826] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5826) [ 127.901564][ T5826] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.910863][ T5826] BTRFS info (device loop0): force clearing of disk cache [ 127.918040][ T5826] BTRFS info (device loop0): setting nodatasum [ 127.924245][ T5826] BTRFS info (device loop0): allowing degraded mounts [ 127.931013][ T5826] BTRFS info (device loop0): enabling disk space caching [ 127.938092][ T5826] BTRFS info (device loop0): disk space caching is enabled [ 127.960488][ T5826] BTRFS info (device loop0): enabling ssd optimizations [ 127.967538][ T5826] BTRFS info (device loop0): auto enabling async discard [ 127.976264][ T5826] BTRFS info (device loop0): rebuilding free space tree [ 127.989656][ T5826] BTRFS info (device loop0): disabling free space tree [ 127.996621][ T5826] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5826] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5826] chdir("./file0") = 0 [pid 5826] ioctl(4, LOOP_CLR_FD) = 0 [pid 5826] close(4) = 0 [pid 5826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] open("./file0", O_RDONLY) = 4 [ 128.006531][ T5826] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.020006][ T5826] BTRFS info (device loop0): checking UUID tree [pid 5826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5826] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = 0 [pid 5825] <... futex resumed>) = 1 [pid 5825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5826] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5825] <... futex resumed>) = 0 [pid 5826] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5825] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5825] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 128.109536][ T5826] BTRFS info (device loop0): balance: start -d -m [ 128.119909][ T5826] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 128.145076][ T5826] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5844 attached [pid 5844] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5844] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5844] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... clone3 resumed> => {parent_tid=[116]}, 88) = 116 [pid 5825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5825] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5825] <... futex resumed>) = 1 [pid 5844] open("./file0", O_RDONLY [pid 5825] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] <... open resumed>) = 5 [pid 5844] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5844] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5825] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5825] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 128.198740][ T5826] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5844] <... ioctl resumed>) = 0 [pid 5844] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] close(3) = 0 [pid 5825] close(4) = 0 [pid 5825] close(5) = 0 [pid 5825] close(6) = -1 EBADF (Bad file descriptor) [pid 5825] close(7) = -1 EBADF (Bad file descriptor) [pid 5825] close(8) = -1 EBADF (Bad file descriptor) [pid 5825] close(9) = -1 EBADF (Bad file descriptor) [pid 5825] close(10) = -1 EBADF (Bad file descriptor) [pid 5825] close(11) = -1 EBADF (Bad file descriptor) [pid 5825] close(12) = -1 EBADF (Bad file descriptor) [pid 5825] close(13) = -1 EBADF (Bad file descriptor) [pid 5825] close(14) = -1 EBADF (Bad file descriptor) [pid 5825] close(15) = -1 EBADF (Bad file descriptor) [pid 5825] close(16 [pid 5826] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5825] close(17) = -1 EBADF (Bad file descriptor) [pid 5825] close(18) = -1 EBADF (Bad file descriptor) [pid 5825] close(19) = -1 EBADF (Bad file descriptor) [pid 5825] close(20) = -1 EBADF (Bad file descriptor) [pid 5825] close(21) = -1 EBADF (Bad file descriptor) [pid 5825] close(22) = -1 EBADF (Bad file descriptor) [pid 5825] close(23) = -1 EBADF (Bad file descriptor) [pid 5825] close(24) = -1 EBADF (Bad file descriptor) [ 128.315241][ T5826] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 128.339031][ T5826] BTRFS info (device loop0): balance: ended with status: 0 [pid 5825] close(25) = -1 EBADF (Bad file descriptor) [pid 5825] close(26) = -1 EBADF (Bad file descriptor) [pid 5825] close(27) = -1 EBADF (Bad file descriptor) [pid 5825] close(28) = -1 EBADF (Bad file descriptor) [pid 5825] close(29) = -1 EBADF (Bad file descriptor) [pid 5825] exit_group(0 [pid 5844] <... futex resumed>) = ? [pid 5844] +++ exited with 0 +++ [pid 5825] <... exit_group resumed>) = ? [pid 5826] <... futex resumed>) = ? [pid 5826] +++ exited with 0 +++ [pid 5825] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./37/binderfs") = 0 [pid 5073] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./37/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./37") = 0 [pid 5073] mkdir("./38", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached , child_tidptr=0x5555570a9690) = 117 [pid 5845] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5845] chdir("./38") = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5845] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5845] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5846 attached [pid 5846] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5845] <... clone3 resumed> => {parent_tid=[118]}, 88) = 118 [pid 5846] <... rseq resumed>) = 0 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] set_robust_list(0x7f8785c4c9a0, 24 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5845] <... futex resumed>) = 0 [pid 5846] memfd_create("syzkaller", 0 [pid 5845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5846] <... memfd_create resumed>) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5846] munmap(0x7f877d82c000, 138412032) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5846] close(3) = 0 [pid 5846] mkdir("./file0", 0777) = 0 [ 128.924468][ T5846] loop0: detected capacity change from 0 to 32768 [ 128.939502][ T5846] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5846) [ 128.956880][ T5846] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 128.966186][ T5846] BTRFS info (device loop0): force clearing of disk cache [ 128.973287][ T5846] BTRFS info (device loop0): setting nodatasum [ 128.979697][ T5846] BTRFS info (device loop0): allowing degraded mounts [ 128.986514][ T5846] BTRFS info (device loop0): enabling disk space caching [ 128.993528][ T5846] BTRFS info (device loop0): disk space caching is enabled [ 129.015263][ T5846] BTRFS info (device loop0): enabling ssd optimizations [ 129.022215][ T5846] BTRFS info (device loop0): auto enabling async discard [ 129.030840][ T5846] BTRFS info (device loop0): rebuilding free space tree [ 129.042374][ T5846] BTRFS info (device loop0): disabling free space tree [ 129.049351][ T5846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.059110][ T5846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5846] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5846] chdir("./file0") = 0 [pid 5846] ioctl(4, LOOP_CLR_FD) = 0 [pid 5846] close(4) = 0 [pid 5846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] <... futex resumed>) = 0 [ 129.072259][ T5846] BTRFS info (device loop0): checking UUID tree [pid 5845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] open("./file0", O_RDONLY) = 4 [pid 5846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 0 [pid 5845] <... futex resumed>) = 1 [pid 5846] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] <... futex resumed>) = 0 [pid 5845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5845] <... futex resumed>) = 0 [pid 5846] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 129.176130][ T5846] BTRFS info (device loop0): balance: start -d -m [ 129.188161][ T5846] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5845] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5845] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5864 attached [pid 5864] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5845] <... clone3 resumed> => {parent_tid=[119]}, 88) = 119 [pid 5864] <... rseq resumed>) = 0 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5864] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] <... futex resumed>) = 0 [pid 5864] open("./file0", O_RDONLY [pid 5845] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... open resumed>) = 5 [pid 5864] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5845] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5864] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 129.217727][ T5846] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5845] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5864] <... ioctl resumed>) = 0 [pid 5864] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 129.334247][ T5846] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 129.358967][ T5846] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5864] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] close(3 [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] <... close resumed>) = 0 [pid 5845] close(4) = 0 [pid 5845] close(5) = 0 [pid 5845] close(6) = -1 EBADF (Bad file descriptor) [pid 5845] close(7) = -1 EBADF (Bad file descriptor) [ 129.378494][ T5846] BTRFS info (device loop0): balance: ended with status: 0 [pid 5845] close(8) = -1 EBADF (Bad file descriptor) [pid 5845] close(9) = -1 EBADF (Bad file descriptor) [pid 5845] close(10) = -1 EBADF (Bad file descriptor) [pid 5845] close(11) = -1 EBADF (Bad file descriptor) [pid 5845] close(12) = -1 EBADF (Bad file descriptor) [pid 5845] close(13) = -1 EBADF (Bad file descriptor) [pid 5845] close(14) = -1 EBADF (Bad file descriptor) [pid 5845] close(15) = -1 EBADF (Bad file descriptor) [pid 5845] close(16) = -1 EBADF (Bad file descriptor) [pid 5845] close(17) = -1 EBADF (Bad file descriptor) [pid 5845] close(18) = -1 EBADF (Bad file descriptor) [pid 5845] close(19) = -1 EBADF (Bad file descriptor) [pid 5845] close(20) = -1 EBADF (Bad file descriptor) [pid 5845] close(21) = -1 EBADF (Bad file descriptor) [pid 5845] close(22) = -1 EBADF (Bad file descriptor) [pid 5845] close(23) = -1 EBADF (Bad file descriptor) [pid 5845] close(24) = -1 EBADF (Bad file descriptor) [pid 5845] close(25) = -1 EBADF (Bad file descriptor) [pid 5845] close(26) = -1 EBADF (Bad file descriptor) [pid 5845] close(27) = -1 EBADF (Bad file descriptor) [pid 5845] close(28) = -1 EBADF (Bad file descriptor) [pid 5845] close(29) = -1 EBADF (Bad file descriptor) [pid 5845] exit_group(0 [pid 5846] <... futex resumed>) = ? [pid 5864] <... futex resumed>) = ? [pid 5845] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ [pid 5845] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=117, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5073] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./38/binderfs") = 0 [pid 5073] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./38/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./38") = 0 [pid 5073] mkdir("./39", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached , child_tidptr=0x5555570a9690) = 120 [pid 5865] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5865] chdir("./39") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5865] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5866 attached [pid 5866] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5865] <... clone3 resumed> => {parent_tid=[121]}, 88) = 121 [pid 5866] <... rseq resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] set_robust_list(0x7f8785c4c9a0, 24 [pid 5865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], [pid 5865] <... futex resumed>) = 0 [pid 5866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5866] munmap(0x7f877d82c000, 138412032) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5866] close(3) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [ 129.909421][ T5866] loop0: detected capacity change from 0 to 32768 [ 129.936896][ T5866] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5866) [ 129.952508][ T5866] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.961805][ T5866] BTRFS info (device loop0): force clearing of disk cache [ 129.968970][ T5866] BTRFS info (device loop0): setting nodatasum [ 129.975178][ T5866] BTRFS info (device loop0): allowing degraded mounts [ 129.981934][ T5866] BTRFS info (device loop0): enabling disk space caching [ 129.988987][ T5866] BTRFS info (device loop0): disk space caching is enabled [ 130.010908][ T5866] BTRFS info (device loop0): enabling ssd optimizations [ 130.017957][ T5866] BTRFS info (device loop0): auto enabling async discard [ 130.026007][ T5866] BTRFS info (device loop0): rebuilding free space tree [ 130.038700][ T5866] BTRFS info (device loop0): disabling free space tree [ 130.045691][ T5866] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 5866] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5866] chdir("./file0") = 0 [pid 5866] ioctl(4, LOOP_CLR_FD) = 0 [pid 5866] close(4) = 0 [pid 5866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] <... futex resumed>) = 0 [pid 5866] open("./file0", O_RDONLY [pid 5865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... open resumed>) = 4 [pid 5866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5866] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] <... futex resumed>) = 0 [pid 5866] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... ioctl resumed>) = 0 [pid 5866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5865] <... futex resumed>) = 0 [ 130.055379][ T5866] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.068392][ T5866] BTRFS info (device loop0): checking UUID tree [pid 5865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5865] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5865] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 130.118931][ T5866] BTRFS info (device loop0): balance: start -d -m [ 130.127930][ T5866] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 130.152902][ T5866] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5884 attached [pid 5884] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5865] <... clone3 resumed> => {parent_tid=[122]}, 88) = 122 [pid 5884] <... rseq resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_SETMASK, [], [pid 5884] set_robust_list(0x7f8785c2b9a0, 24 [pid 5865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5884] <... set_robust_list resumed>) = 0 [pid 5865] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] rt_sigprocmask(SIG_SETMASK, [], [pid 5865] <... futex resumed>) = 0 [pid 5884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5865] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] open("./file0", O_RDONLY) = 5 [pid 5884] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] <... futex resumed>) = 0 [pid 5884] <... futex resumed>) = 1 [pid 5865] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 130.272898][ T5866] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5884] <... ioctl resumed>) = 0 [pid 5884] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] close(3 [pid 5866] <... futex resumed>) = 0 [pid 5866] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... close resumed>) = 0 [pid 5865] close(4) = 0 [pid 5865] close(5) = 0 [pid 5865] close(6) = -1 EBADF (Bad file descriptor) [pid 5865] close(7) = -1 EBADF (Bad file descriptor) [pid 5865] close(8) = -1 EBADF (Bad file descriptor) [pid 5865] close(9) = -1 EBADF (Bad file descriptor) [pid 5865] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] close(11) = -1 EBADF (Bad file descriptor) [pid 5865] close(12) = -1 EBADF (Bad file descriptor) [pid 5865] close(13) = -1 EBADF (Bad file descriptor) [pid 5865] close(14) = -1 EBADF (Bad file descriptor) [pid 5865] close(15) = -1 EBADF (Bad file descriptor) [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5865] close(17) = -1 EBADF (Bad file descriptor) [ 130.359288][ T5866] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 130.379595][ T5866] BTRFS info (device loop0): balance: ended with status: 0 [pid 5865] close(18) = -1 EBADF (Bad file descriptor) [pid 5865] close(19) = -1 EBADF (Bad file descriptor) [pid 5865] close(20) = -1 EBADF (Bad file descriptor) [pid 5865] close(21) = -1 EBADF (Bad file descriptor) [pid 5865] close(22) = -1 EBADF (Bad file descriptor) [pid 5865] close(23) = -1 EBADF (Bad file descriptor) [pid 5865] close(24) = -1 EBADF (Bad file descriptor) [pid 5865] close(25) = -1 EBADF (Bad file descriptor) [pid 5865] close(26) = -1 EBADF (Bad file descriptor) [pid 5865] close(27) = -1 EBADF (Bad file descriptor) [pid 5865] close(28) = -1 EBADF (Bad file descriptor) [pid 5865] close(29) = -1 EBADF (Bad file descriptor) [pid 5865] exit_group(0 [pid 5884] <... futex resumed>) = ? [pid 5884] +++ exited with 0 +++ [pid 5866] <... futex resumed>) = ? [pid 5865] <... exit_group resumed>) = ? [pid 5866] +++ exited with 0 +++ [pid 5865] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=120, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=45 /* 0.45 s */} --- [pid 5073] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./39/binderfs") = 0 [pid 5073] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./39/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./39") = 0 [pid 5073] mkdir("./40", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached , child_tidptr=0x5555570a9690) = 123 [pid 5885] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5885] chdir("./40") = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0) = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5885] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5885] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5886 attached [pid 5886] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5886] set_robust_list(0x7f8785c4c9a0, 24 [pid 5885] <... clone3 resumed> => {parent_tid=[124]}, 88) = 124 [pid 5886] <... set_robust_list resumed>) = 0 [pid 5885] rt_sigprocmask(SIG_SETMASK, [], [pid 5886] rt_sigprocmask(SIG_SETMASK, [], [pid 5885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5886] memfd_create("syzkaller", 0 [pid 5885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5886] <... memfd_create resumed>) = 3 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5886] munmap(0x7f877d82c000, 138412032) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5886] close(3) = 0 [pid 5886] mkdir("./file0", 0777) = 0 [ 131.029454][ T5886] loop0: detected capacity change from 0 to 32768 [ 131.044021][ T5886] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5886) [ 131.059765][ T5886] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.069046][ T5886] BTRFS info (device loop0): force clearing of disk cache [ 131.076334][ T5886] BTRFS info (device loop0): setting nodatasum [ 131.082642][ T5886] BTRFS info (device loop0): allowing degraded mounts [ 131.089465][ T5886] BTRFS info (device loop0): enabling disk space caching [ 131.096814][ T5886] BTRFS info (device loop0): disk space caching is enabled [ 131.118201][ T5886] BTRFS info (device loop0): enabling ssd optimizations [ 131.125209][ T5886] BTRFS info (device loop0): auto enabling async discard [ 131.133113][ T5886] BTRFS info (device loop0): rebuilding free space tree [ 131.145486][ T5886] BTRFS info (device loop0): disabling free space tree [ 131.152553][ T5886] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.162637][ T5886] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5886] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5886] chdir("./file0") = 0 [pid 5886] ioctl(4, LOOP_CLR_FD) = 0 [pid 5886] close(4) = 0 [pid 5886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5886] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] <... futex resumed>) = 0 [pid 5885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = 0 [pid 5885] <... futex resumed>) = 1 [pid 5886] open("./file0", O_RDONLY [ 131.176250][ T5886] BTRFS info (device loop0): checking UUID tree [pid 5885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... open resumed>) = 4 [pid 5886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = 0 [pid 5886] <... futex resumed>) = 1 [pid 5885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5885] <... futex resumed>) = 0 [pid 5886] <... ioctl resumed>) = 0 [pid 5885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5885] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5885] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[125]}, 88) = 125 [pid 5885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5885] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5904 attached [pid 5904] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5904] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5904] open("./file0", O_RDONLY) = 5 [pid 5904] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5904] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5904] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 131.247540][ T5886] BTRFS info (device loop0): balance: start -d -m [ 131.257886][ T5886] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 131.286665][ T5886] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5885] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5904] <... ioctl resumed>) = 0 [pid 5904] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 131.445334][ T5886] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 131.469866][ T5886] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 5904] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5886] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] close(3 [pid 5886] <... futex resumed>) = 0 [pid 5885] <... close resumed>) = 0 [pid 5886] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] close(4) = 0 [pid 5885] close(5) = 0 [pid 5885] close(6) = -1 EBADF (Bad file descriptor) [ 131.489418][ T5886] BTRFS info (device loop0): balance: ended with status: 0 [pid 5885] close(7) = -1 EBADF (Bad file descriptor) [pid 5885] close(8) = -1 EBADF (Bad file descriptor) [pid 5885] close(9) = -1 EBADF (Bad file descriptor) [pid 5885] close(10) = -1 EBADF (Bad file descriptor) [pid 5885] close(11) = -1 EBADF (Bad file descriptor) [pid 5885] close(12) = -1 EBADF (Bad file descriptor) [pid 5885] close(13) = -1 EBADF (Bad file descriptor) [pid 5885] close(14) = -1 EBADF (Bad file descriptor) [pid 5885] close(15) = -1 EBADF (Bad file descriptor) [pid 5885] close(16) = -1 EBADF (Bad file descriptor) [pid 5885] close(17) = -1 EBADF (Bad file descriptor) [pid 5885] close(18) = -1 EBADF (Bad file descriptor) [pid 5885] close(19) = -1 EBADF (Bad file descriptor) [pid 5885] close(20) = -1 EBADF (Bad file descriptor) [pid 5885] close(21) = -1 EBADF (Bad file descriptor) [pid 5885] close(22) = -1 EBADF (Bad file descriptor) [pid 5885] close(23) = -1 EBADF (Bad file descriptor) [pid 5885] close(24) = -1 EBADF (Bad file descriptor) [pid 5885] close(25) = -1 EBADF (Bad file descriptor) [pid 5885] close(26) = -1 EBADF (Bad file descriptor) [pid 5885] close(27) = -1 EBADF (Bad file descriptor) [pid 5885] close(28) = -1 EBADF (Bad file descriptor) [pid 5885] close(29) = -1 EBADF (Bad file descriptor) [pid 5885] exit_group(0 [pid 5904] <... futex resumed>) = ? [pid 5885] <... exit_group resumed>) = ? [pid 5904] +++ exited with 0 +++ [pid 5886] <... futex resumed>) = ? [pid 5886] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=123, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./40/binderfs") = 0 [pid 5073] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./40/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./40") = 0 [pid 5073] mkdir("./41", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5905 attached , child_tidptr=0x5555570a9690) = 126 [pid 5905] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5905] chdir("./41") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5905] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5906 attached => {parent_tid=[127]}, 88) = 127 [pid 5905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5906] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5906] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5906] munmap(0x7f877d82c000, 138412032) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5906] close(3) = 0 [pid 5906] mkdir("./file0", 0777) = 0 [ 132.020196][ T5906] loop0: detected capacity change from 0 to 32768 [ 132.038214][ T5906] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5906) [ 132.053854][ T5906] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 132.063154][ T5906] BTRFS info (device loop0): force clearing of disk cache [ 132.070301][ T5906] BTRFS info (device loop0): setting nodatasum [ 132.076498][ T5906] BTRFS info (device loop0): allowing degraded mounts [ 132.083249][ T5906] BTRFS info (device loop0): enabling disk space caching [ 132.090290][ T5906] BTRFS info (device loop0): disk space caching is enabled [ 132.112584][ T5906] BTRFS info (device loop0): enabling ssd optimizations [ 132.119823][ T5906] BTRFS info (device loop0): auto enabling async discard [ 132.127986][ T5906] BTRFS info (device loop0): rebuilding free space tree [ 132.139564][ T5906] BTRFS info (device loop0): disabling free space tree [ 132.146518][ T5906] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.156206][ T5906] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5906] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5906] chdir("./file0") = 0 [pid 5906] ioctl(4, LOOP_CLR_FD) = 0 [pid 5906] close(4) = 0 [pid 5906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 132.169565][ T5906] BTRFS info (device loop0): checking UUID tree [pid 5906] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5906] <... futex resumed>) = 0 [pid 5905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] open("./file0", O_RDONLY) = 4 [pid 5906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... ioctl resumed>) = 0 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5905] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5905] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5924 attached [ 132.221869][ T5906] BTRFS info (device loop0): balance: start -d -m [ 132.231074][ T5906] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 132.255675][ T5906] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata => {parent_tid=[128]}, 88) = 128 [pid 5905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5905] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5924] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5905] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] open("./file0", O_RDONLY) = 5 [pid 5924] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5924] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5905] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.308792][ T5906] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5905] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5924] <... ioctl resumed>) = 0 [pid 5924] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5906] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] close(5) = 0 [pid 5905] close(6) = -1 EBADF (Bad file descriptor) [pid 5905] close(7) = -1 EBADF (Bad file descriptor) [pid 5905] close(8) = -1 EBADF (Bad file descriptor) [pid 5905] close(9) = -1 EBADF (Bad file descriptor) [pid 5905] close(10) = -1 EBADF (Bad file descriptor) [ 132.458537][ T5906] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 132.479585][ T5906] BTRFS info (device loop0): balance: ended with status: 0 [pid 5905] close(11) = -1 EBADF (Bad file descriptor) [pid 5905] close(12) = -1 EBADF (Bad file descriptor) [pid 5905] close(13) = -1 EBADF (Bad file descriptor) [pid 5905] close(14) = -1 EBADF (Bad file descriptor) [pid 5905] close(15) = -1 EBADF (Bad file descriptor) [pid 5905] close(16) = -1 EBADF (Bad file descriptor) [pid 5905] close(17) = -1 EBADF (Bad file descriptor) [pid 5905] close(18) = -1 EBADF (Bad file descriptor) [pid 5905] close(19) = -1 EBADF (Bad file descriptor) [pid 5905] close(20) = -1 EBADF (Bad file descriptor) [pid 5905] close(21) = -1 EBADF (Bad file descriptor) [pid 5905] close(22) = -1 EBADF (Bad file descriptor) [pid 5905] close(23) = -1 EBADF (Bad file descriptor) [pid 5905] close(24) = -1 EBADF (Bad file descriptor) [pid 5905] close(25) = -1 EBADF (Bad file descriptor) [pid 5905] close(26) = -1 EBADF (Bad file descriptor) [pid 5905] close(27) = -1 EBADF (Bad file descriptor) [pid 5905] close(28) = -1 EBADF (Bad file descriptor) [pid 5905] close(29) = -1 EBADF (Bad file descriptor) [pid 5905] exit_group(0 [pid 5924] <... futex resumed>) = ? [pid 5924] +++ exited with 0 +++ [pid 5906] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5906] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=126, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=45 /* 0.45 s */} --- [pid 5073] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./41/binderfs") = 0 [pid 5073] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./41/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./41") = 0 [pid 5073] mkdir("./42", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached [pid 5925] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5925] chdir("./42" [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 129 [pid 5925] <... chdir resumed>) = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5925] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5926 attached [pid 5926] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5925] <... clone3 resumed> => {parent_tid=[130]}, 88) = 130 [pid 5926] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5925] rt_sigprocmask(SIG_SETMASK, [], [pid 5926] rt_sigprocmask(SIG_SETMASK, [], [pid 5925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5926] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] memfd_create("syzkaller", 0 [pid 5925] <... futex resumed>) = 0 [pid 5925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5926] <... memfd_create resumed>) = 3 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5926] munmap(0x7f877d82c000, 138412032) = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5926] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5926] close(3) = 0 [pid 5926] mkdir("./file0", 0777) = 0 [ 133.107578][ T5926] loop0: detected capacity change from 0 to 32768 [ 133.121322][ T5926] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5926) [ 133.137557][ T5926] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 133.146964][ T5926] BTRFS info (device loop0): force clearing of disk cache [ 133.154112][ T5926] BTRFS info (device loop0): setting nodatasum [ 133.160281][ T5926] BTRFS info (device loop0): allowing degraded mounts [ 133.167139][ T5926] BTRFS info (device loop0): enabling disk space caching [ 133.174246][ T5926] BTRFS info (device loop0): disk space caching is enabled [ 133.196803][ T5926] BTRFS info (device loop0): enabling ssd optimizations [ 133.203765][ T5926] BTRFS info (device loop0): auto enabling async discard [ 133.211952][ T5926] BTRFS info (device loop0): rebuilding free space tree [ 133.223712][ T5926] BTRFS info (device loop0): disabling free space tree [ 133.233958][ T5926] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.243607][ T5926] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5926] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file0") = 0 [pid 5926] ioctl(4, LOOP_CLR_FD) = 0 [pid 5926] close(4) = 0 [pid 5926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5926] <... futex resumed>) = 0 [pid 5925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] open("./file0", O_RDONLY) = 4 [pid 5926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 133.256868][ T5926] BTRFS info (device loop0): checking UUID tree [pid 5926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] <... futex resumed>) = 0 [pid 5925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = 1 [pid 5926] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... ioctl resumed>) = 0 [pid 5926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] <... futex resumed>) = 0 [pid 5926] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5925] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5925] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5944 attached => {parent_tid=[131]}, 88) = 131 [pid 5944] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5944] set_robust_list(0x7f8785c2b9a0, 24 [pid 5925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5925] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] rt_sigprocmask(SIG_SETMASK, [], [pid 5925] <... futex resumed>) = 0 [ 133.309188][ T5926] BTRFS info (device loop0): balance: start -d -m [ 133.318582][ T5926] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 133.343111][ T5926] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5925] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5944] open("./file0", O_RDONLY) = 5 [pid 5944] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5944] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] <... futex resumed>) = 0 [pid 5925] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 133.393061][ T5926] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5944] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5925] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5944] <... ioctl resumed>) = 0 [pid 5944] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5944] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] close(5) = 0 [pid 5925] close(6) = -1 EBADF (Bad file descriptor) [pid 5925] close(7) = -1 EBADF (Bad file descriptor) [pid 5925] close(8) = -1 EBADF (Bad file descriptor) [pid 5925] close(9) = -1 EBADF (Bad file descriptor) [ 133.549207][ T5926] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 133.569086][ T5926] BTRFS info (device loop0): balance: ended with status: 0 [pid 5925] close(10) = -1 EBADF (Bad file descriptor) [pid 5925] close(11) = -1 EBADF (Bad file descriptor) [pid 5925] close(12) = -1 EBADF (Bad file descriptor) [pid 5925] close(13) = -1 EBADF (Bad file descriptor) [pid 5925] close(14) = -1 EBADF (Bad file descriptor) [pid 5925] close(15) = -1 EBADF (Bad file descriptor) [pid 5925] close(16) = -1 EBADF (Bad file descriptor) [pid 5925] close(17) = -1 EBADF (Bad file descriptor) [pid 5925] close(18) = -1 EBADF (Bad file descriptor) [pid 5925] close(19) = -1 EBADF (Bad file descriptor) [pid 5925] close(20) = -1 EBADF (Bad file descriptor) [pid 5925] close(21) = -1 EBADF (Bad file descriptor) [pid 5925] close(22) = -1 EBADF (Bad file descriptor) [pid 5925] close(23) = -1 EBADF (Bad file descriptor) [pid 5925] close(24) = -1 EBADF (Bad file descriptor) [pid 5925] close(25) = -1 EBADF (Bad file descriptor) [pid 5925] close(26) = -1 EBADF (Bad file descriptor) [pid 5925] close(27) = -1 EBADF (Bad file descriptor) [pid 5925] close(28) = -1 EBADF (Bad file descriptor) [pid 5925] close(29) = -1 EBADF (Bad file descriptor) [pid 5925] exit_group(0 [pid 5944] <... futex resumed>) = ? [pid 5944] +++ exited with 0 +++ [pid 5925] <... exit_group resumed>) = ? [pid 5926] <... futex resumed>) = ? [pid 5926] +++ exited with 0 +++ [pid 5925] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=129, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./42/binderfs") = 0 [pid 5073] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./42/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./42") = 0 [pid 5073] mkdir("./43", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached , child_tidptr=0x5555570a9690) = 132 [pid 5945] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5945] chdir("./43") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5945] write(3, "1000", 4) = 4 [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5945] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5945] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5946 attached [pid 5946] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5945] <... clone3 resumed> => {parent_tid=[133]}, 88) = 133 [pid 5946] <... rseq resumed>) = 0 [pid 5945] rt_sigprocmask(SIG_SETMASK, [], [pid 5946] set_robust_list(0x7f8785c4c9a0, 24 [pid 5945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] rt_sigprocmask(SIG_SETMASK, [], [pid 5945] <... futex resumed>) = 0 [pid 5946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5946] memfd_create("syzkaller", 0) = 3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5946] munmap(0x7f877d82c000, 138412032) = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5946] close(3) = 0 [pid 5946] mkdir("./file0", 0777) = 0 [ 134.245831][ T5946] loop0: detected capacity change from 0 to 32768 [ 134.259998][ T5946] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5946) [ 134.275279][ T5946] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 134.284572][ T5946] BTRFS info (device loop0): force clearing of disk cache [ 134.291696][ T5946] BTRFS info (device loop0): setting nodatasum [ 134.297941][ T5946] BTRFS info (device loop0): allowing degraded mounts [ 134.304814][ T5946] BTRFS info (device loop0): enabling disk space caching [ 134.311849][ T5946] BTRFS info (device loop0): disk space caching is enabled [ 134.334222][ T5946] BTRFS info (device loop0): enabling ssd optimizations [ 134.341178][ T5946] BTRFS info (device loop0): auto enabling async discard [ 134.349231][ T5946] BTRFS info (device loop0): rebuilding free space tree [ 134.361448][ T5946] BTRFS info (device loop0): disabling free space tree [ 134.368494][ T5946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.378191][ T5946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5946] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5946] chdir("./file0") = 0 [pid 5946] ioctl(4, LOOP_CLR_FD) = 0 [pid 5946] close(4) = 0 [pid 5946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5946] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 134.391604][ T5946] BTRFS info (device loop0): checking UUID tree [pid 5945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... futex resumed>) = 0 [pid 5946] open("./file0", O_RDONLY) = 4 [pid 5946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5946] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] <... futex resumed>) = 0 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... ioctl resumed>) = 0 [pid 5946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5945] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5945] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 134.452768][ T5946] BTRFS info (device loop0): balance: start -d -m [ 134.461081][ T5946] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 134.492837][ T5946] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 5964 attached [pid 5964] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 5945] <... clone3 resumed> => {parent_tid=[134]}, 88) = 134 [pid 5964] <... rseq resumed>) = 0 [pid 5945] rt_sigprocmask(SIG_SETMASK, [], [pid 5964] set_robust_list(0x7f8785c2b9a0, 24 [pid 5945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5964] <... set_robust_list resumed>) = 0 [pid 5945] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] rt_sigprocmask(SIG_SETMASK, [], [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5964] open("./file0", O_RDONLY) = 5 [pid 5964] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5964] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 1 [pid 5964] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 5945] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5964] <... ioctl resumed>) = 0 [pid 5964] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 134.612283][ T5946] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 5964] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5946] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5946] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] close(3) = 0 [pid 5945] close(4) = 0 [pid 5945] close(5) = 0 [pid 5945] close(6) = -1 EBADF (Bad file descriptor) [pid 5945] close(7) = -1 EBADF (Bad file descriptor) [pid 5945] close(8) = -1 EBADF (Bad file descriptor) [pid 5945] close(9) = -1 EBADF (Bad file descriptor) [pid 5945] close(10) = -1 EBADF (Bad file descriptor) [pid 5945] close(11) = -1 EBADF (Bad file descriptor) [pid 5945] close(12) = -1 EBADF (Bad file descriptor) [ 134.681823][ T5946] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 134.701563][ T5946] BTRFS info (device loop0): balance: ended with status: 0 [pid 5945] close(13) = -1 EBADF (Bad file descriptor) [pid 5945] close(14) = -1 EBADF (Bad file descriptor) [pid 5945] close(15) = -1 EBADF (Bad file descriptor) [pid 5945] close(16) = -1 EBADF (Bad file descriptor) [pid 5945] close(17) = -1 EBADF (Bad file descriptor) [pid 5945] close(18) = -1 EBADF (Bad file descriptor) [pid 5945] close(19) = -1 EBADF (Bad file descriptor) [pid 5945] close(20) = -1 EBADF (Bad file descriptor) [pid 5945] close(21) = -1 EBADF (Bad file descriptor) [pid 5945] close(22) = -1 EBADF (Bad file descriptor) [pid 5945] close(23) = -1 EBADF (Bad file descriptor) [pid 5945] close(24) = -1 EBADF (Bad file descriptor) [pid 5945] close(25) = -1 EBADF (Bad file descriptor) [pid 5945] close(26) = -1 EBADF (Bad file descriptor) [pid 5945] close(27) = -1 EBADF (Bad file descriptor) [pid 5945] close(28) = -1 EBADF (Bad file descriptor) [pid 5945] close(29) = -1 EBADF (Bad file descriptor) [pid 5945] exit_group(0) = ? [pid 5964] <... futex resumed>) = ? [pid 5946] <... futex resumed>) = ? [pid 5964] +++ exited with 0 +++ [pid 5946] +++ exited with 0 +++ [pid 5945] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=132, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./43/binderfs") = 0 [pid 5073] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./43/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./43") = 0 [pid 5073] mkdir("./44", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5965 attached , child_tidptr=0x5555570a9690) = 135 [pid 5965] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5965] chdir("./44") = 0 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5965] setpgid(0, 0) = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5965] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5966 attached [pid 5966] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 5965] <... clone3 resumed> => {parent_tid=[136]}, 88) = 136 [pid 5966] <... rseq resumed>) = 0 [pid 5965] rt_sigprocmask(SIG_SETMASK, [], [pid 5966] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 5965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5966] rt_sigprocmask(SIG_SETMASK, [], [pid 5965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5965] <... futex resumed>) = 0 [pid 5966] memfd_create("syzkaller", 0 [pid 5965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5966] <... memfd_create resumed>) = 3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5966] munmap(0x7f877d82c000, 138412032) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5966] close(3) = 0 [pid 5966] mkdir("./file0", 0777) = 0 [ 135.239908][ T5966] loop0: detected capacity change from 0 to 32768 [ 135.249335][ T5966] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5966) [ 135.265829][ T5966] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.275114][ T5966] BTRFS info (device loop0): force clearing of disk cache [ 135.282217][ T5966] BTRFS info (device loop0): setting nodatasum [ 135.288404][ T5966] BTRFS info (device loop0): allowing degraded mounts [ 135.295213][ T5966] BTRFS info (device loop0): enabling disk space caching [ 135.302223][ T5966] BTRFS info (device loop0): disk space caching is enabled [ 135.323580][ T5966] BTRFS info (device loop0): enabling ssd optimizations [ 135.330761][ T5966] BTRFS info (device loop0): auto enabling async discard [pid 5966] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5966] chdir("./file0") = 0 [pid 5966] ioctl(4, LOOP_CLR_FD) = 0 [pid 5966] close(4) = 0 [pid 5966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... futex resumed>) = 0 [pid 5965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 135.339166][ T5966] BTRFS info (device loop0): rebuilding free space tree [ 135.351615][ T5966] BTRFS info (device loop0): disabling free space tree [ 135.358784][ T5966] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.368443][ T5966] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.381585][ T5966] BTRFS info (device loop0): checking UUID tree [pid 5966] open("./file0", O_RDONLY) = 4 [pid 5966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... futex resumed>) = 0 [pid 5965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5966] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 5965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] <... ioctl resumed>) = 0 [pid 5966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5965] <... futex resumed>) = 0 [pid 5966] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5965] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5965] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5965] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[137]}, 88) = 137 [pid 5965] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5965] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5984 attached [pid 5984] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 5984] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 5984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5984] open("./file0", O_RDONLY) = 5 [pid 5984] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5984] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... futex resumed>) = 0 [pid 5965] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5984] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 135.456752][ T5966] BTRFS info (device loop0): balance: start -d -m [ 135.465608][ T5966] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 135.496387][ T5966] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5965] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5984] <... ioctl resumed>) = 0 [pid 5984] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.656844][ T5966] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 135.680486][ T5966] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 135.699894][ T5966] BTRFS info (device loop0): balance: ended with status: 0 [pid 5984] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] close(3) = 0 [pid 5965] close(4) = 0 [pid 5966] <... futex resumed>) = 0 [pid 5965] close(5) = 0 [pid 5966] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] close(6) = -1 EBADF (Bad file descriptor) [pid 5965] close(7) = -1 EBADF (Bad file descriptor) [pid 5965] close(8) = -1 EBADF (Bad file descriptor) [pid 5965] close(9) = -1 EBADF (Bad file descriptor) [pid 5965] close(10) = -1 EBADF (Bad file descriptor) [pid 5965] close(11) = -1 EBADF (Bad file descriptor) [pid 5965] close(12) = -1 EBADF (Bad file descriptor) [pid 5965] close(13) = -1 EBADF (Bad file descriptor) [pid 5965] close(14) = -1 EBADF (Bad file descriptor) [pid 5965] close(15) = -1 EBADF (Bad file descriptor) [pid 5965] close(16) = -1 EBADF (Bad file descriptor) [pid 5965] close(17) = -1 EBADF (Bad file descriptor) [pid 5965] close(18) = -1 EBADF (Bad file descriptor) [pid 5965] close(19) = -1 EBADF (Bad file descriptor) [pid 5965] close(20) = -1 EBADF (Bad file descriptor) [pid 5965] close(21) = -1 EBADF (Bad file descriptor) [pid 5965] close(22) = -1 EBADF (Bad file descriptor) [pid 5965] close(23) = -1 EBADF (Bad file descriptor) [pid 5965] close(24) = -1 EBADF (Bad file descriptor) [pid 5965] close(25) = -1 EBADF (Bad file descriptor) [pid 5965] close(26) = -1 EBADF (Bad file descriptor) [pid 5965] close(27) = -1 EBADF (Bad file descriptor) [pid 5965] close(28) = -1 EBADF (Bad file descriptor) [pid 5965] close(29) = -1 EBADF (Bad file descriptor) [pid 5965] exit_group(0 [pid 5984] <... futex resumed>) = ? [pid 5966] <... futex resumed>) = ? [pid 5965] <... exit_group resumed>) = ? [pid 5984] +++ exited with 0 +++ [pid 5966] +++ exited with 0 +++ [pid 5965] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=135, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./44/binderfs") = 0 [pid 5073] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./44/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./44") = 0 [pid 5073] mkdir("./45", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5985 attached , child_tidptr=0x5555570a9690) = 138 [pid 5985] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5985] chdir("./45") = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 5985] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 5986 attached => {parent_tid=[139]}, 88) = 139 [pid 5985] rt_sigprocmask(SIG_SETMASK, [], [pid 5986] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 5985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5986] set_robust_list(0x7f8785c4c9a0, 24 [pid 5985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... set_robust_list resumed>) = 0 [pid 5985] <... futex resumed>) = 0 [pid 5986] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5986] memfd_create("syzkaller", 0) = 3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5986] munmap(0x7f877d82c000, 138412032) = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5986] close(3) = 0 [pid 5986] mkdir("./file0", 0777) = 0 [ 136.331202][ T5986] loop0: detected capacity change from 0 to 32768 [ 136.345788][ T5986] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (5986) [ 136.362679][ T5986] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.372072][ T5986] BTRFS info (device loop0): force clearing of disk cache [ 136.379257][ T5986] BTRFS info (device loop0): setting nodatasum [ 136.385488][ T5986] BTRFS info (device loop0): allowing degraded mounts [ 136.392267][ T5986] BTRFS info (device loop0): enabling disk space caching [ 136.399497][ T5986] BTRFS info (device loop0): disk space caching is enabled [ 136.420768][ T5986] BTRFS info (device loop0): enabling ssd optimizations [ 136.427762][ T5986] BTRFS info (device loop0): auto enabling async discard [ 136.436379][ T5986] BTRFS info (device loop0): rebuilding free space tree [ 136.448254][ T5986] BTRFS info (device loop0): disabling free space tree [ 136.455239][ T5986] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.465436][ T5986] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 5986] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 5986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5986] chdir("./file0") = 0 [pid 5986] ioctl(4, LOOP_CLR_FD) = 0 [pid 5986] close(4) = 0 [pid 5986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 5985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] open("./file0", O_RDONLY) = 4 [ 136.478616][ T5986] BTRFS info (device loop0): checking UUID tree [pid 5986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5986] <... futex resumed>) = 0 [pid 5986] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 5986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] <... futex resumed>) = 0 [pid 5986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 5986] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 136.562209][ T5986] BTRFS info (device loop0): balance: start -d -m [ 136.572707][ T5986] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 5985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5985] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 5985] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[140]}, 88) = 140 [pid 5985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5985] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6004 attached [pid 6004] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6004] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6004] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6004] open("./file0", O_RDONLY) = 5 [pid 6004] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5985] <... futex resumed>) = 0 [pid 6004] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 6004] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 136.607306][ T5986] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 5985] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5985] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6004] <... ioctl resumed>) = 0 [pid 6004] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 136.742548][ T5986] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 136.768454][ T5986] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6004] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5986] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] close(3 [pid 5986] <... futex resumed>) = 0 [pid 5985] <... close resumed>) = 0 [pid 5986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] close(4) = 0 [pid 5985] close(5) = 0 [pid 5985] close(6) = -1 EBADF (Bad file descriptor) [pid 5985] close(7) = -1 EBADF (Bad file descriptor) [ 136.788794][ T5986] BTRFS info (device loop0): balance: ended with status: 0 [pid 5985] close(8) = -1 EBADF (Bad file descriptor) [pid 5985] close(9) = -1 EBADF (Bad file descriptor) [pid 5985] close(10) = -1 EBADF (Bad file descriptor) [pid 5985] close(11) = -1 EBADF (Bad file descriptor) [pid 5985] close(12) = -1 EBADF (Bad file descriptor) [pid 5985] close(13) = -1 EBADF (Bad file descriptor) [pid 5985] close(14) = -1 EBADF (Bad file descriptor) [pid 5985] close(15) = -1 EBADF (Bad file descriptor) [pid 5985] close(16) = -1 EBADF (Bad file descriptor) [pid 5985] close(17) = -1 EBADF (Bad file descriptor) [pid 5985] close(18) = -1 EBADF (Bad file descriptor) [pid 5985] close(19) = -1 EBADF (Bad file descriptor) [pid 5985] close(20) = -1 EBADF (Bad file descriptor) [pid 5985] close(21) = -1 EBADF (Bad file descriptor) [pid 5985] close(22) = -1 EBADF (Bad file descriptor) [pid 5985] close(23) = -1 EBADF (Bad file descriptor) [pid 5985] close(24) = -1 EBADF (Bad file descriptor) [pid 5985] close(25) = -1 EBADF (Bad file descriptor) [pid 5985] close(26) = -1 EBADF (Bad file descriptor) [pid 5985] close(27) = -1 EBADF (Bad file descriptor) [pid 5985] close(28) = -1 EBADF (Bad file descriptor) [pid 5985] close(29) = -1 EBADF (Bad file descriptor) [pid 5985] exit_group(0 [pid 6004] <... futex resumed>) = ? [pid 5986] <... futex resumed>) = ? [pid 5985] <... exit_group resumed>) = ? [pid 6004] +++ exited with 0 +++ [pid 5986] +++ exited with 0 +++ [pid 5985] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=138, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./45/binderfs") = 0 [pid 5073] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./45/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./45") = 0 [pid 5073] mkdir("./46", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6005 attached , child_tidptr=0x5555570a9690) = 141 [pid 6005] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6005] chdir("./46") = 0 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6005] setpgid(0, 0) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6005] write(3, "1000", 4) = 4 [pid 6005] close(3) = 0 [pid 6005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6005] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6005] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6005] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6005] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6006 attached [pid 6006] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6005] <... clone3 resumed> => {parent_tid=[142]}, 88) = 142 [pid 6006] <... rseq resumed>) = 0 [pid 6005] rt_sigprocmask(SIG_SETMASK, [], [pid 6006] set_robust_list(0x7f8785c4c9a0, 24 [pid 6005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6006] <... set_robust_list resumed>) = 0 [pid 6005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6005] <... futex resumed>) = 0 [pid 6006] memfd_create("syzkaller", 0 [pid 6005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6006] <... memfd_create resumed>) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6006] munmap(0x7f877d82c000, 138412032) = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6006] close(3) = 0 [pid 6006] mkdir("./file0", 0777) = 0 [ 137.337536][ T6006] loop0: detected capacity change from 0 to 32768 [ 137.351386][ T6006] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6006) [ 137.369282][ T6006] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.378602][ T6006] BTRFS info (device loop0): force clearing of disk cache [ 137.385771][ T6006] BTRFS info (device loop0): setting nodatasum [ 137.391957][ T6006] BTRFS info (device loop0): allowing degraded mounts [ 137.398769][ T6006] BTRFS info (device loop0): enabling disk space caching [ 137.405811][ T6006] BTRFS info (device loop0): disk space caching is enabled [ 137.427310][ T6006] BTRFS info (device loop0): enabling ssd optimizations [ 137.434325][ T6006] BTRFS info (device loop0): auto enabling async discard [ 137.442146][ T6006] BTRFS info (device loop0): rebuilding free space tree [ 137.455073][ T6006] BTRFS info (device loop0): disabling free space tree [ 137.461971][ T6006] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.471896][ T6006] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6006] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6006] chdir("./file0") = 0 [pid 6006] ioctl(4, LOOP_CLR_FD) = 0 [pid 6006] close(4) = 0 [pid 6006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6006] open("./file0", O_RDONLY [pid 6005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6006] <... open resumed>) = 4 [pid 6006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6005] <... futex resumed>) = 0 [pid 6006] <... ioctl resumed>) = 0 [pid 6005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6006] <... futex resumed>) = 1 [pid 6005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6006] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6005] <... futex resumed>) = 0 [ 137.485287][ T6006] BTRFS info (device loop0): checking UUID tree [pid 6005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6005] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6005] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6005] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6005] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6024 attached => {parent_tid=[143]}, 88) = 143 [pid 6024] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6005] rt_sigprocmask(SIG_SETMASK, [], [pid 6024] set_robust_list(0x7f8785c2b9a0, 24 [pid 6005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6024] <... set_robust_list resumed>) = 0 [pid 6005] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] rt_sigprocmask(SIG_SETMASK, [], [pid 6005] <... futex resumed>) = 0 [pid 6024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6024] open("./file0", O_RDONLY [pid 6005] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... open resumed>) = 5 [pid 6024] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6005] <... futex resumed>) = 0 [pid 6024] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6005] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 137.523562][ T6006] BTRFS info (device loop0): balance: start -d -m [ 137.533164][ T6006] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 137.560098][ T6006] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6024] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6005] <... futex resumed>) = 0 [pid 6005] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6024] <... ioctl resumed>) = 0 [pid 6024] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.752575][ T6006] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 137.778450][ T6006] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6024] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6006] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6006] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6005] close(3) = 0 [pid 6005] close(4) = 0 [pid 6005] close(5) = 0 [pid 6005] close(6) = -1 EBADF (Bad file descriptor) [pid 6005] close(7) = -1 EBADF (Bad file descriptor) [pid 6005] close(8) = -1 EBADF (Bad file descriptor) [pid 6005] close(9) = -1 EBADF (Bad file descriptor) [pid 6005] close(10) = -1 EBADF (Bad file descriptor) [ 137.797557][ T6006] BTRFS info (device loop0): balance: ended with status: 0 [pid 6005] close(11) = -1 EBADF (Bad file descriptor) [pid 6005] close(12) = -1 EBADF (Bad file descriptor) [pid 6005] close(13) = -1 EBADF (Bad file descriptor) [pid 6005] close(14) = -1 EBADF (Bad file descriptor) [pid 6005] close(15) = -1 EBADF (Bad file descriptor) [pid 6005] close(16) = -1 EBADF (Bad file descriptor) [pid 6005] close(17) = -1 EBADF (Bad file descriptor) [pid 6005] close(18) = -1 EBADF (Bad file descriptor) [pid 6005] close(19) = -1 EBADF (Bad file descriptor) [pid 6005] close(20) = -1 EBADF (Bad file descriptor) [pid 6005] close(21) = -1 EBADF (Bad file descriptor) [pid 6005] close(22) = -1 EBADF (Bad file descriptor) [pid 6005] close(23) = -1 EBADF (Bad file descriptor) [pid 6005] close(24) = -1 EBADF (Bad file descriptor) [pid 6005] close(25) = -1 EBADF (Bad file descriptor) [pid 6005] close(26) = -1 EBADF (Bad file descriptor) [pid 6005] close(27) = -1 EBADF (Bad file descriptor) [pid 6005] close(28) = -1 EBADF (Bad file descriptor) [pid 6005] close(29) = -1 EBADF (Bad file descriptor) [pid 6005] exit_group(0 [pid 6024] <... futex resumed>) = ? [pid 6024] +++ exited with 0 +++ [pid 6006] <... futex resumed>) = ? [pid 6005] <... exit_group resumed>) = ? [pid 6006] +++ exited with 0 +++ [pid 6005] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=141, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./46/binderfs") = 0 [pid 5073] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./46/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./46") = 0 [pid 5073] mkdir("./47", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6025 attached , child_tidptr=0x5555570a9690) = 144 [pid 6025] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6025] chdir("./47") = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6025] setpgid(0, 0) = 0 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6025] write(3, "1000", 4) = 4 [pid 6025] close(3) = 0 [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6025] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6025] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6026 attached [pid 6026] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6026] set_robust_list(0x7f8785c4c9a0, 24 [pid 6025] <... clone3 resumed> => {parent_tid=[145]}, 88) = 145 [pid 6026] <... set_robust_list resumed>) = 0 [pid 6025] rt_sigprocmask(SIG_SETMASK, [], [pid 6026] rt_sigprocmask(SIG_SETMASK, [], [pid 6025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6026] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] memfd_create("syzkaller", 0 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6026] <... memfd_create resumed>) = 3 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6026] munmap(0x7f877d82c000, 138412032) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6026] close(3) = 0 [pid 6026] mkdir("./file0", 0777) = 0 [ 138.370499][ T6026] loop0: detected capacity change from 0 to 32768 [ 138.394727][ T6026] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6026) [ 138.410990][ T6026] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 138.420255][ T6026] BTRFS info (device loop0): force clearing of disk cache [ 138.427388][ T6026] BTRFS info (device loop0): setting nodatasum [ 138.433543][ T6026] BTRFS info (device loop0): allowing degraded mounts [ 138.440357][ T6026] BTRFS info (device loop0): enabling disk space caching [ 138.447431][ T6026] BTRFS info (device loop0): disk space caching is enabled [ 138.468675][ T6026] BTRFS info (device loop0): enabling ssd optimizations [ 138.475667][ T6026] BTRFS info (device loop0): auto enabling async discard [ 138.483823][ T6026] BTRFS info (device loop0): rebuilding free space tree [ 138.495752][ T6026] BTRFS info (device loop0): disabling free space tree [ 138.502652][ T6026] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6026] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6026] chdir("./file0") = 0 [pid 6026] ioctl(4, LOOP_CLR_FD) = 0 [pid 6026] close(4) = 0 [pid 6026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6026] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = 0 [pid 6025] <... futex resumed>) = 1 [pid 6026] open("./file0", O_RDONLY [pid 6025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... open resumed>) = 4 [pid 6026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = 1 [pid 6025] <... futex resumed>) = 0 [pid 6026] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... ioctl resumed>) = 0 [pid 6026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = 1 [pid 6025] <... futex resumed>) = 0 [pid 6026] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 138.512362][ T6026] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.525577][ T6026] BTRFS info (device loop0): checking UUID tree [pid 6025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6025] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6025] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[146]}, 88) = 146 ./strace-static-x86_64: Process 6044 attached [pid 6025] rt_sigprocmask(SIG_SETMASK, [], [pid 6044] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6044] <... rseq resumed>) = 0 [pid 6025] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] set_robust_list(0x7f8785c2b9a0, 24 [pid 6025] <... futex resumed>) = 0 [pid 6044] <... set_robust_list resumed>) = 0 [pid 6044] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6044] open("./file0", O_RDONLY [pid 6025] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] <... open resumed>) = 5 [pid 6044] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6025] <... futex resumed>) = 0 [pid 6044] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6025] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6025] <... futex resumed>) = 0 [pid 6044] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 138.584878][ T6026] BTRFS info (device loop0): balance: start -d -m [ 138.594893][ T6026] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 138.618853][ T6026] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6025] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 138.704286][ T6026] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6044] <... ioctl resumed>) = 0 [pid 6044] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6044] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6026] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] close(3 [pid 6026] <... futex resumed>) = 0 [pid 6026] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6025] <... close resumed>) = 0 [pid 6025] close(4) = 0 [pid 6025] close(5) = 0 [pid 6025] close(6) = -1 EBADF (Bad file descriptor) [pid 6025] close(7) = -1 EBADF (Bad file descriptor) [pid 6025] close(8) = -1 EBADF (Bad file descriptor) [pid 6025] close(9) = -1 EBADF (Bad file descriptor) [pid 6025] close(10) = -1 EBADF (Bad file descriptor) [pid 6025] close(11) = -1 EBADF (Bad file descriptor) [pid 6025] close(12) = -1 EBADF (Bad file descriptor) [pid 6025] close(13) = -1 EBADF (Bad file descriptor) [pid 6025] close(14) = -1 EBADF (Bad file descriptor) [pid 6025] close(15) = -1 EBADF (Bad file descriptor) [pid 6025] close(16) = -1 EBADF (Bad file descriptor) [pid 6025] close(17) = -1 EBADF (Bad file descriptor) [pid 6025] close(18) = -1 EBADF (Bad file descriptor) [pid 6025] close(19) = -1 EBADF (Bad file descriptor) [pid 6025] close(20) = -1 EBADF (Bad file descriptor) [pid 6025] close(21) = -1 EBADF (Bad file descriptor) [pid 6025] close(22) = -1 EBADF (Bad file descriptor) [pid 6025] close(23) = -1 EBADF (Bad file descriptor) [pid 6025] close(24) = -1 EBADF (Bad file descriptor) [pid 6025] close(25) = -1 EBADF (Bad file descriptor) [pid 6025] close(26) = -1 EBADF (Bad file descriptor) [ 138.808933][ T6026] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 138.828956][ T6026] BTRFS info (device loop0): balance: ended with status: 0 [pid 6025] close(27) = -1 EBADF (Bad file descriptor) [pid 6025] close(28) = -1 EBADF (Bad file descriptor) [pid 6025] close(29) = -1 EBADF (Bad file descriptor) [pid 6025] exit_group(0 [pid 6044] <... futex resumed>) = ? [pid 6025] <... exit_group resumed>) = ? [pid 6044] +++ exited with 0 +++ [pid 6026] <... futex resumed>) = ? [pid 6026] +++ exited with 0 +++ [pid 6025] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=144, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./47/binderfs") = 0 [pid 5073] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./47/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./47") = 0 [pid 5073] mkdir("./48", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6045 attached , child_tidptr=0x5555570a9690) = 147 [pid 6045] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6045] chdir("./48") = 0 [pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6045] setpgid(0, 0) = 0 [pid 6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6045] write(3, "1000", 4) = 4 [pid 6045] close(3) = 0 [pid 6045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6045] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6045] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6046 attached => {parent_tid=[148]}, 88) = 148 [pid 6046] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6046] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], [pid 6045] rt_sigprocmask(SIG_SETMASK, [], [pid 6046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6046] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6045] <... futex resumed>) = 0 [pid 6046] memfd_create("syzkaller", 0 [pid 6045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6046] <... memfd_create resumed>) = 3 [pid 6046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6046] munmap(0x7f877d82c000, 138412032) = 0 [pid 6046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6046] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6046] close(3) = 0 [pid 6046] mkdir("./file0", 0777) = 0 [ 139.389944][ T6046] loop0: detected capacity change from 0 to 32768 [ 139.404960][ T6046] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6046) [ 139.421101][ T6046] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 139.430586][ T6046] BTRFS info (device loop0): force clearing of disk cache [ 139.437765][ T6046] BTRFS info (device loop0): setting nodatasum [ 139.443978][ T6046] BTRFS info (device loop0): allowing degraded mounts [ 139.450759][ T6046] BTRFS info (device loop0): enabling disk space caching [ 139.457850][ T6046] BTRFS info (device loop0): disk space caching is enabled [ 139.479724][ T6046] BTRFS info (device loop0): enabling ssd optimizations [ 139.486775][ T6046] BTRFS info (device loop0): auto enabling async discard [ 139.494814][ T6046] BTRFS info (device loop0): rebuilding free space tree [ 139.506629][ T6046] BTRFS info (device loop0): disabling free space tree [ 139.513516][ T6046] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.523207][ T6046] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6046] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6046] chdir("./file0") = 0 [pid 6046] ioctl(4, LOOP_CLR_FD) = 0 [pid 6046] close(4) = 0 [ 139.536470][ T6046] BTRFS info (device loop0): checking UUID tree [pid 6046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6045] <... futex resumed>) = 0 [pid 6046] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6045] <... futex resumed>) = 0 [pid 6046] open("./file0", O_RDONLY [pid 6045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6046] <... open resumed>) = 4 [pid 6046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6045] <... futex resumed>) = 0 [pid 6045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6045] <... futex resumed>) = 0 [pid 6045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6045] <... futex resumed>) = 0 [pid 6045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6046] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6045] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6045] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [ 139.639006][ T6046] BTRFS info (device loop0): balance: start -d -m [ 139.649004][ T6046] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6045] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[149]}, 88) = 149 ./strace-static-x86_64: Process 6064 attached [pid 6045] rt_sigprocmask(SIG_SETMASK, [], [pid 6064] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6064] <... rseq resumed>) = 0 [pid 6064] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6064] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6064] open("./file0", O_RDONLY [pid 6045] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6064] <... open resumed>) = 5 [pid 6064] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6045] <... futex resumed>) = 0 [pid 6064] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6064] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 139.682380][ T6046] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6045] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6045] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 139.776118][ T6046] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6064] <... ioctl resumed>) = 0 [pid 6064] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] close(3) = 0 [pid 6045] close(4) = 0 [pid 6045] close(5) = 0 [pid 6045] close(6) = -1 EBADF (Bad file descriptor) [pid 6045] close(7) = -1 EBADF (Bad file descriptor) [pid 6045] close(8) = -1 EBADF (Bad file descriptor) [pid 6045] close(9) = -1 EBADF (Bad file descriptor) [pid 6045] close(10) = -1 EBADF (Bad file descriptor) [pid 6045] close(11) = -1 EBADF (Bad file descriptor) [pid 6045] close(12) = -1 EBADF (Bad file descriptor) [pid 6045] close(13) = -1 EBADF (Bad file descriptor) [ 139.845917][ T6046] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 139.865916][ T6046] BTRFS info (device loop0): balance: ended with status: 0 [pid 6045] close(14) = -1 EBADF (Bad file descriptor) [pid 6045] close(15) = -1 EBADF (Bad file descriptor) [pid 6045] close(16) = -1 EBADF (Bad file descriptor) [pid 6045] close(17) = -1 EBADF (Bad file descriptor) [pid 6045] close(18) = -1 EBADF (Bad file descriptor) [pid 6045] close(19) = -1 EBADF (Bad file descriptor) [pid 6045] close(20) = -1 EBADF (Bad file descriptor) [pid 6045] close(21) = -1 EBADF (Bad file descriptor) [pid 6045] close(22) = -1 EBADF (Bad file descriptor) [pid 6045] close(23) = -1 EBADF (Bad file descriptor) [pid 6045] close(24) = -1 EBADF (Bad file descriptor) [pid 6045] close(25) = -1 EBADF (Bad file descriptor) [pid 6045] close(26) = -1 EBADF (Bad file descriptor) [pid 6045] close(27) = -1 EBADF (Bad file descriptor) [pid 6045] close(28) = -1 EBADF (Bad file descriptor) [pid 6045] close(29) = -1 EBADF (Bad file descriptor) [pid 6045] exit_group(0) = ? [pid 6064] <... futex resumed>) = ? [pid 6046] <... futex resumed>) = ? [pid 6046] +++ exited with 0 +++ [pid 6064] +++ exited with 0 +++ [pid 6045] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=147, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./48/binderfs") = 0 [pid 5073] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./48/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./48") = 0 [pid 5073] mkdir("./49", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6065 attached [pid 6065] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 150 [pid 6065] chdir("./49") = 0 [pid 6065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6065] setpgid(0, 0) = 0 [pid 6065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6065] write(3, "1000", 4) = 4 [pid 6065] close(3) = 0 [pid 6065] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6065] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6065] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6065] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6066 attached => {parent_tid=[151]}, 88) = 151 [pid 6066] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6065] rt_sigprocmask(SIG_SETMASK, [], [pid 6066] set_robust_list(0x7f8785c4c9a0, 24 [pid 6065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6066] <... set_robust_list resumed>) = 0 [pid 6065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6065] <... futex resumed>) = 0 [pid 6065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6066] memfd_create("syzkaller", 0) = 3 [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6066] munmap(0x7f877d82c000, 138412032) = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6066] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6066] close(3) = 0 [pid 6066] mkdir("./file0", 0777) = 0 [ 140.753596][ T6066] loop0: detected capacity change from 0 to 32768 [ 140.777838][ T6066] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6066) [ 140.794343][ T6066] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 140.803611][ T6066] BTRFS info (device loop0): force clearing of disk cache [ 140.810811][ T6066] BTRFS info (device loop0): setting nodatasum [ 140.817031][ T6066] BTRFS info (device loop0): allowing degraded mounts [ 140.823800][ T6066] BTRFS info (device loop0): enabling disk space caching [ 140.830882][ T6066] BTRFS info (device loop0): disk space caching is enabled [ 140.852415][ T6066] BTRFS info (device loop0): enabling ssd optimizations [ 140.859425][ T6066] BTRFS info (device loop0): auto enabling async discard [ 140.867359][ T6066] BTRFS info (device loop0): rebuilding free space tree [ 140.879406][ T6066] BTRFS info (device loop0): disabling free space tree [ 140.886356][ T6066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6066] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6066] chdir("./file0") = 0 [pid 6066] ioctl(4, LOOP_CLR_FD) = 0 [pid 6066] close(4) = 0 [pid 6066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6066] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] <... futex resumed>) = 0 [pid 6065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = 0 [pid 6065] <... futex resumed>) = 1 [pid 6066] open("./file0", O_RDONLY [pid 6065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... open resumed>) = 4 [pid 6066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... ioctl resumed>) = 0 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... futex resumed>) = 0 [pid 6065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6066] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 140.896042][ T6066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.909062][ T6066] BTRFS info (device loop0): checking UUID tree [pid 6065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6065] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6065] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6065] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6084 attached => {parent_tid=[152]}, 88) = 152 [pid 6084] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6065] rt_sigprocmask(SIG_SETMASK, [], [pid 6084] <... rseq resumed>) = 0 [pid 6084] set_robust_list(0x7f8785c2b9a0, 24 [pid 6065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6084] <... set_robust_list resumed>) = 0 [pid 6065] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6065] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] open("./file0", O_RDONLY) = 5 [pid 6084] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6065] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6065] <... futex resumed>) = 0 [ 140.959938][ T6066] BTRFS info (device loop0): balance: start -d -m [ 140.967656][ T6066] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 140.992542][ T6066] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6065] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6084] <... ioctl resumed>) = 0 [pid 6084] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 141.166120][ T6066] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 141.189554][ T6066] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6084] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6066] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] close(3 [pid 6066] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] <... close resumed>) = 0 [pid 6065] close(4) = 0 [pid 6065] close(5) = 0 [pid 6065] close(6) = -1 EBADF (Bad file descriptor) [pid 6065] close(7) = -1 EBADF (Bad file descriptor) [pid 6065] close(8) = -1 EBADF (Bad file descriptor) [pid 6065] close(9) = -1 EBADF (Bad file descriptor) [pid 6065] close(10) = -1 EBADF (Bad file descriptor) [pid 6065] close(11) = -1 EBADF (Bad file descriptor) [pid 6065] close(12) = -1 EBADF (Bad file descriptor) [ 141.209824][ T6066] BTRFS info (device loop0): balance: ended with status: 0 [pid 6065] close(13) = -1 EBADF (Bad file descriptor) [pid 6065] close(14) = -1 EBADF (Bad file descriptor) [pid 6065] close(15) = -1 EBADF (Bad file descriptor) [pid 6065] close(16) = -1 EBADF (Bad file descriptor) [pid 6065] close(17) = -1 EBADF (Bad file descriptor) [pid 6065] close(18) = -1 EBADF (Bad file descriptor) [pid 6065] close(19) = -1 EBADF (Bad file descriptor) [pid 6065] close(20) = -1 EBADF (Bad file descriptor) [pid 6065] close(21) = -1 EBADF (Bad file descriptor) [pid 6065] close(22) = -1 EBADF (Bad file descriptor) [pid 6065] close(23) = -1 EBADF (Bad file descriptor) [pid 6065] close(24) = -1 EBADF (Bad file descriptor) [pid 6065] close(25) = -1 EBADF (Bad file descriptor) [pid 6065] close(26) = -1 EBADF (Bad file descriptor) [pid 6065] close(27) = -1 EBADF (Bad file descriptor) [pid 6065] close(28) = -1 EBADF (Bad file descriptor) [pid 6065] close(29) = -1 EBADF (Bad file descriptor) [pid 6065] exit_group(0 [pid 6084] <... futex resumed>) = ? [pid 6066] <... futex resumed>) = ? [pid 6065] <... exit_group resumed>) = ? [pid 6084] +++ exited with 0 +++ [pid 6066] +++ exited with 0 +++ [pid 6065] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=150, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./49/binderfs") = 0 [pid 5073] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./49/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./49") = 0 [pid 5073] mkdir("./50", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6085 attached , child_tidptr=0x5555570a9690) = 153 [pid 6085] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6085] chdir("./50") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6085] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6085] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6086 attached [pid 6086] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6086] set_robust_list(0x7f8785c4c9a0, 24 [pid 6085] <... clone3 resumed> => {parent_tid=[154]}, 88) = 154 [pid 6086] <... set_robust_list resumed>) = 0 [pid 6085] rt_sigprocmask(SIG_SETMASK, [], [pid 6086] rt_sigprocmask(SIG_SETMASK, [], [pid 6085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] memfd_create("syzkaller", 0 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6086] <... memfd_create resumed>) = 3 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6086] munmap(0x7f877d82c000, 138412032) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6086] close(3) = 0 [pid 6086] mkdir("./file0", 0777) = 0 [ 141.827981][ T6086] loop0: detected capacity change from 0 to 32768 [ 141.851855][ T6086] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6086) [ 141.868172][ T6086] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.877481][ T6086] BTRFS info (device loop0): force clearing of disk cache [ 141.884720][ T6086] BTRFS info (device loop0): setting nodatasum [ 141.890939][ T6086] BTRFS info (device loop0): allowing degraded mounts [ 141.897782][ T6086] BTRFS info (device loop0): enabling disk space caching [ 141.904981][ T6086] BTRFS info (device loop0): disk space caching is enabled [ 141.926756][ T6086] BTRFS info (device loop0): enabling ssd optimizations [ 141.933733][ T6086] BTRFS info (device loop0): auto enabling async discard [ 141.942463][ T6086] BTRFS info (device loop0): rebuilding free space tree [ 141.955480][ T6086] BTRFS info (device loop0): disabling free space tree [ 141.962441][ T6086] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6086] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6086] chdir("./file0") = 0 [pid 6086] ioctl(4, LOOP_CLR_FD) = 0 [pid 6086] close(4) = 0 [ 141.972198][ T6086] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.985721][ T6086] BTRFS info (device loop0): checking UUID tree [pid 6086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6086] open("./file0", O_RDONLY) = 4 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = 0 [pid 6085] <... futex resumed>) = 1 [pid 6086] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... ioctl resumed>) = 0 [pid 6086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 142.094412][ T6086] BTRFS info (device loop0): balance: start -d -m [ 142.103120][ T6086] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6086] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6085] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6085] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[155]}, 88) = 155 [pid 6085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6085] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6104 attached [pid 6104] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6104] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6104] open("./file0", O_RDONLY) = 5 [pid 6104] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6104] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6104] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 142.135459][ T6086] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6085] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6104] <... ioctl resumed>) = 0 [pid 6104] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 142.276303][ T6086] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 142.300463][ T6086] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6104] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6086] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] close(5) = 0 [pid 6085] close(6) = -1 EBADF (Bad file descriptor) [pid 6085] close(7) = -1 EBADF (Bad file descriptor) [pid 6085] close(8) = -1 EBADF (Bad file descriptor) [ 142.320040][ T6086] BTRFS info (device loop0): balance: ended with status: 0 [pid 6085] close(9) = -1 EBADF (Bad file descriptor) [pid 6085] close(10) = -1 EBADF (Bad file descriptor) [pid 6085] close(11) = -1 EBADF (Bad file descriptor) [pid 6085] close(12) = -1 EBADF (Bad file descriptor) [pid 6085] close(13) = -1 EBADF (Bad file descriptor) [pid 6085] close(14) = -1 EBADF (Bad file descriptor) [pid 6085] close(15) = -1 EBADF (Bad file descriptor) [pid 6085] close(16) = -1 EBADF (Bad file descriptor) [pid 6085] close(17) = -1 EBADF (Bad file descriptor) [pid 6085] close(18) = -1 EBADF (Bad file descriptor) [pid 6085] close(19) = -1 EBADF (Bad file descriptor) [pid 6085] close(20) = -1 EBADF (Bad file descriptor) [pid 6085] close(21) = -1 EBADF (Bad file descriptor) [pid 6085] close(22) = -1 EBADF (Bad file descriptor) [pid 6085] close(23) = -1 EBADF (Bad file descriptor) [pid 6085] close(24) = -1 EBADF (Bad file descriptor) [pid 6085] close(25) = -1 EBADF (Bad file descriptor) [pid 6085] close(26) = -1 EBADF (Bad file descriptor) [pid 6085] close(27) = -1 EBADF (Bad file descriptor) [pid 6085] close(28) = -1 EBADF (Bad file descriptor) [pid 6085] close(29) = -1 EBADF (Bad file descriptor) [pid 6085] exit_group(0) = ? [pid 6104] <... futex resumed>) = ? [pid 6104] +++ exited with 0 +++ [pid 6086] <... futex resumed>) = ? [pid 6086] +++ exited with 0 +++ [pid 6085] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=153, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./50/binderfs") = 0 [pid 5073] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./50/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./50") = 0 [pid 5073] mkdir("./51", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6105 attached , child_tidptr=0x5555570a9690) = 156 [pid 6105] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6105] chdir("./51") = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6105] setpgid(0, 0) = 0 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6105] write(3, "1000", 4) = 4 [pid 6105] close(3) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6105] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6105] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6105] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6106 attached => {parent_tid=[157]}, 88) = 157 [pid 6106] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6106] set_robust_list(0x7f8785c4c9a0, 24 [pid 6105] rt_sigprocmask(SIG_SETMASK, [], [pid 6106] <... set_robust_list resumed>) = 0 [pid 6105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6106] rt_sigprocmask(SIG_SETMASK, [], [pid 6105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6105] <... futex resumed>) = 0 [pid 6105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6106] memfd_create("syzkaller", 0) = 3 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6106] munmap(0x7f877d82c000, 138412032) = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6106] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6106] close(3) = 0 [pid 6106] mkdir("./file0", 0777) = 0 [ 142.935588][ T6106] loop0: detected capacity change from 0 to 32768 [ 142.958979][ T6106] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6106) [ 142.974708][ T6106] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 142.984017][ T6106] BTRFS info (device loop0): force clearing of disk cache [ 142.991135][ T6106] BTRFS info (device loop0): setting nodatasum [ 142.997358][ T6106] BTRFS info (device loop0): allowing degraded mounts [ 143.004182][ T6106] BTRFS info (device loop0): enabling disk space caching [ 143.011195][ T6106] BTRFS info (device loop0): disk space caching is enabled [ 143.033332][ T6106] BTRFS info (device loop0): enabling ssd optimizations [ 143.040396][ T6106] BTRFS info (device loop0): auto enabling async discard [ 143.048896][ T6106] BTRFS info (device loop0): rebuilding free space tree [ 143.060586][ T6106] BTRFS info (device loop0): disabling free space tree [ 143.067573][ T6106] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6106] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6106] chdir("./file0") = 0 [pid 6106] ioctl(4, LOOP_CLR_FD) = 0 [pid 6106] close(4) = 0 [pid 6106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6106] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6106] open("./file0", O_RDONLY [pid 6105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6106] <... open resumed>) = 4 [pid 6106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6106] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6105] <... futex resumed>) = 0 [pid 6106] <... ioctl resumed>) = 0 [pid 6105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 143.077294][ T6106] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.090673][ T6106] BTRFS info (device loop0): checking UUID tree [pid 6106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6106] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6105] <... futex resumed>) = 0 [ 143.161457][ T6106] BTRFS info (device loop0): balance: start -d -m [ 143.173033][ T6106] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6105] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6105] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6105] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[158]}, 88) = 158 [pid 6105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6105] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6105] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6124 attached [pid 6124] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6124] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6124] open("./file0", O_RDONLY) = 5 [pid 6124] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6124] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6124] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 143.203178][ T6106] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6105] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6124] <... ioctl resumed>) = 0 [pid 6124] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 143.347639][ T6106] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 143.371437][ T6106] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6124] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] close(3 [pid 6106] <... futex resumed>) = 0 [pid 6105] <... close resumed>) = 0 [pid 6105] close(4 [pid 6106] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] <... close resumed>) = 0 [pid 6105] close(5) = 0 [pid 6105] close(6) = -1 EBADF (Bad file descriptor) [pid 6105] close(7) = -1 EBADF (Bad file descriptor) [pid 6105] close(8) = -1 EBADF (Bad file descriptor) [pid 6105] close(9) = -1 EBADF (Bad file descriptor) [pid 6105] close(10) = -1 EBADF (Bad file descriptor) [ 143.391076][ T6106] BTRFS info (device loop0): balance: ended with status: 0 [pid 6105] close(11) = -1 EBADF (Bad file descriptor) [pid 6105] close(12) = -1 EBADF (Bad file descriptor) [pid 6105] close(13) = -1 EBADF (Bad file descriptor) [pid 6105] close(14) = -1 EBADF (Bad file descriptor) [pid 6105] close(15) = -1 EBADF (Bad file descriptor) [pid 6105] close(16) = -1 EBADF (Bad file descriptor) [pid 6105] close(17) = -1 EBADF (Bad file descriptor) [pid 6105] close(18) = -1 EBADF (Bad file descriptor) [pid 6105] close(19) = -1 EBADF (Bad file descriptor) [pid 6105] close(20) = -1 EBADF (Bad file descriptor) [pid 6105] close(21) = -1 EBADF (Bad file descriptor) [pid 6105] close(22) = -1 EBADF (Bad file descriptor) [pid 6105] close(23) = -1 EBADF (Bad file descriptor) [pid 6105] close(24) = -1 EBADF (Bad file descriptor) [pid 6105] close(25) = -1 EBADF (Bad file descriptor) [pid 6105] close(26) = -1 EBADF (Bad file descriptor) [pid 6105] close(27) = -1 EBADF (Bad file descriptor) [pid 6105] close(28) = -1 EBADF (Bad file descriptor) [pid 6105] close(29) = -1 EBADF (Bad file descriptor) [pid 6105] exit_group(0 [pid 6124] <... futex resumed>) = ? [pid 6124] +++ exited with 0 +++ [pid 6105] <... exit_group resumed>) = ? [pid 6106] <... futex resumed>) = ? [pid 6106] +++ exited with 0 +++ [pid 6105] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=156, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./51/binderfs") = 0 [pid 5073] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./51/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./51") = 0 [pid 5073] mkdir("./52", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6125 attached , child_tidptr=0x5555570a9690) = 159 [pid 6125] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6125] chdir("./52") = 0 [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6125] setpgid(0, 0) = 0 [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6125] write(3, "1000", 4) = 4 [pid 6125] close(3) = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6125] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6125] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6126 attached [pid 6126] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6125] <... clone3 resumed> => {parent_tid=[160]}, 88) = 160 [pid 6126] <... rseq resumed>) = 0 [pid 6125] rt_sigprocmask(SIG_SETMASK, [], [pid 6126] set_robust_list(0x7f8785c4c9a0, 24 [pid 6125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6126] <... set_robust_list resumed>) = 0 [pid 6125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] rt_sigprocmask(SIG_SETMASK, [], [pid 6125] <... futex resumed>) = 0 [pid 6126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6126] memfd_create("syzkaller", 0) = 3 [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6126] munmap(0x7f877d82c000, 138412032) = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6126] close(3) = 0 [pid 6126] mkdir("./file0", 0777) = 0 [ 144.144002][ T6126] loop0: detected capacity change from 0 to 32768 [ 144.159375][ T6126] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6126) [ 144.175638][ T6126] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 144.184970][ T6126] BTRFS info (device loop0): force clearing of disk cache [ 144.192072][ T6126] BTRFS info (device loop0): setting nodatasum [ 144.198265][ T6126] BTRFS info (device loop0): allowing degraded mounts [ 144.205047][ T6126] BTRFS info (device loop0): enabling disk space caching [ 144.212067][ T6126] BTRFS info (device loop0): disk space caching is enabled [ 144.233658][ T6126] BTRFS info (device loop0): enabling ssd optimizations [ 144.240646][ T6126] BTRFS info (device loop0): auto enabling async discard [ 144.248843][ T6126] BTRFS info (device loop0): rebuilding free space tree [ 144.260820][ T6126] BTRFS info (device loop0): disabling free space tree [ 144.267864][ T6126] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.277555][ T6126] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6126] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6126] chdir("./file0") = 0 [pid 6126] ioctl(4, LOOP_CLR_FD) = 0 [pid 6126] close(4) = 0 [pid 6126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [ 144.291194][ T6126] BTRFS info (device loop0): checking UUID tree [pid 6126] open("./file0", O_RDONLY [pid 6125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] <... open resumed>) = 4 [pid 6125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6126] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6125] <... futex resumed>) = 0 [pid 6125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6126] <... futex resumed>) = 1 [pid 6126] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6125] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6125] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[161]}, 88) = 161 [pid 6125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6125] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6144 attached [pid 6144] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6144] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6144] open("./file0", O_RDONLY) = 5 [pid 6144] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6125] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6125] <... futex resumed>) = 0 [ 144.382195][ T6126] BTRFS info (device loop0): balance: start -d -m [ 144.392279][ T6126] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 144.420807][ T6126] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6125] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6144] <... ioctl resumed>) = 0 [pid 6144] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6144] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] close(3) = 0 [pid 6125] close(4) = 0 [pid 6125] close(5) = 0 [pid 6125] close(6) = -1 EBADF (Bad file descriptor) [pid 6125] close(7) = -1 EBADF (Bad file descriptor) [pid 6125] close(8) = -1 EBADF (Bad file descriptor) [pid 6125] close(9) = -1 EBADF (Bad file descriptor) [pid 6125] close(10) = -1 EBADF (Bad file descriptor) [pid 6125] close(11) = -1 EBADF (Bad file descriptor) [ 144.560475][ T6126] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 144.583972][ T6126] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 144.603087][ T6126] BTRFS info (device loop0): balance: ended with status: 0 [pid 6125] close(12) = -1 EBADF (Bad file descriptor) [pid 6125] close(13) = -1 EBADF (Bad file descriptor) [pid 6125] close(14) = -1 EBADF (Bad file descriptor) [pid 6125] close(15) = -1 EBADF (Bad file descriptor) [pid 6125] close(16) = -1 EBADF (Bad file descriptor) [pid 6125] close(17) = -1 EBADF (Bad file descriptor) [pid 6125] close(18) = -1 EBADF (Bad file descriptor) [pid 6125] close(19) = -1 EBADF (Bad file descriptor) [pid 6125] close(20) = -1 EBADF (Bad file descriptor) [pid 6125] close(21) = -1 EBADF (Bad file descriptor) [pid 6125] close(22) = -1 EBADF (Bad file descriptor) [pid 6125] close(23) = -1 EBADF (Bad file descriptor) [pid 6125] close(24) = -1 EBADF (Bad file descriptor) [pid 6125] close(25) = -1 EBADF (Bad file descriptor) [pid 6125] close(26) = -1 EBADF (Bad file descriptor) [pid 6125] close(27) = -1 EBADF (Bad file descriptor) [pid 6125] close(28) = -1 EBADF (Bad file descriptor) [pid 6125] close(29) = -1 EBADF (Bad file descriptor) [pid 6125] exit_group(0) = ? [pid 6144] <... futex resumed>) = ? [pid 6126] <... futex resumed>) = ? [pid 6144] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 6125] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=159, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./52/binderfs") = 0 [pid 5073] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./52/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./52") = 0 [pid 5073] mkdir("./53", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6145 attached , child_tidptr=0x5555570a9690) = 162 [pid 6145] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6145] chdir("./53") = 0 [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6145] setpgid(0, 0) = 0 [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6145] write(3, "1000", 4) = 4 [pid 6145] close(3) = 0 [pid 6145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6145] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6145] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6146 attached [pid 6146] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6145] <... clone3 resumed> => {parent_tid=[163]}, 88) = 163 [pid 6146] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], [pid 6146] rt_sigprocmask(SIG_SETMASK, [], [pid 6145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] memfd_create("syzkaller", 0 [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6146] <... memfd_create resumed>) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6146] munmap(0x7f877d82c000, 138412032) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6146] close(3) = 0 [pid 6146] mkdir("./file0", 0777) = 0 [ 145.278721][ T6146] loop0: detected capacity change from 0 to 32768 [ 145.294542][ T6146] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6146) [ 145.309845][ T6146] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 145.319113][ T6146] BTRFS info (device loop0): force clearing of disk cache [ 145.326256][ T6146] BTRFS info (device loop0): setting nodatasum [ 145.332418][ T6146] BTRFS info (device loop0): allowing degraded mounts [ 145.339231][ T6146] BTRFS info (device loop0): enabling disk space caching [ 145.346309][ T6146] BTRFS info (device loop0): disk space caching is enabled [ 145.368136][ T6146] BTRFS info (device loop0): enabling ssd optimizations [ 145.375140][ T6146] BTRFS info (device loop0): auto enabling async discard [ 145.382942][ T6146] BTRFS info (device loop0): rebuilding free space tree [ 145.395133][ T6146] BTRFS info (device loop0): disabling free space tree [ 145.402009][ T6146] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.411693][ T6146] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6146] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6146] chdir("./file0") = 0 [pid 6146] ioctl(4, LOOP_CLR_FD) = 0 [pid 6146] close(4) = 0 [pid 6146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] open("./file0", O_RDONLY) = 4 [ 145.425236][ T6146] BTRFS info (device loop0): checking UUID tree [pid 6146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6146] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6145] <... futex resumed>) = 1 [pid 6146] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6145] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6145] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6164 attached => {parent_tid=[164]}, 88) = 164 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6145] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6145] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6164] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6164] open("./file0", O_RDONLY) = 5 [pid 6164] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6145] <... futex resumed>) = 0 [pid 6164] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] <... futex resumed>) = 0 [ 145.486298][ T6146] BTRFS info (device loop0): balance: start -d -m [ 145.494490][ T6146] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 145.519138][ T6146] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6164] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6145] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6164] <... ioctl resumed>) = 0 [pid 6164] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 145.694149][ T6146] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 145.722418][ T6146] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6164] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] close(3 [pid 6146] <... futex resumed>) = 0 [pid 6146] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] <... close resumed>) = 0 [pid 6145] close(4) = 0 [pid 6145] close(5) = 0 [pid 6145] close(6) = -1 EBADF (Bad file descriptor) [pid 6145] close(7) = -1 EBADF (Bad file descriptor) [pid 6145] close(8) = -1 EBADF (Bad file descriptor) [pid 6145] close(9) = -1 EBADF (Bad file descriptor) [pid 6145] close(10) = -1 EBADF (Bad file descriptor) [pid 6145] close(11) = -1 EBADF (Bad file descriptor) [pid 6145] close(12) = -1 EBADF (Bad file descriptor) [pid 6145] close(13) = -1 EBADF (Bad file descriptor) [pid 6145] close(14) = -1 EBADF (Bad file descriptor) [pid 6145] close(15) = -1 EBADF (Bad file descriptor) [pid 6145] close(16) = -1 EBADF (Bad file descriptor) [pid 6145] close(17) = -1 EBADF (Bad file descriptor) [pid 6145] close(18) = -1 EBADF (Bad file descriptor) [pid 6145] close(19) = -1 EBADF (Bad file descriptor) [pid 6145] close(20) = -1 EBADF (Bad file descriptor) [pid 6145] close(21) = -1 EBADF (Bad file descriptor) [pid 6145] close(22) = -1 EBADF (Bad file descriptor) [pid 6145] close(23) = -1 EBADF (Bad file descriptor) [ 145.745543][ T6146] BTRFS info (device loop0): balance: ended with status: 0 [pid 6145] close(24) = -1 EBADF (Bad file descriptor) [pid 6145] close(25) = -1 EBADF (Bad file descriptor) [pid 6145] close(26) = -1 EBADF (Bad file descriptor) [pid 6145] close(27) = -1 EBADF (Bad file descriptor) [pid 6145] close(28) = -1 EBADF (Bad file descriptor) [pid 6145] close(29) = -1 EBADF (Bad file descriptor) [pid 6145] exit_group(0 [pid 6164] <... futex resumed>) = ? [pid 6146] <... futex resumed>) = ? [pid 6164] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 6145] <... exit_group resumed>) = ? [pid 6145] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=162, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./53/binderfs") = 0 [pid 5073] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./53/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./53") = 0 [pid 5073] mkdir("./54", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6165 attached , child_tidptr=0x5555570a9690) = 165 [pid 6165] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6165] chdir("./54") = 0 [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6165] setpgid(0, 0) = 0 [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6165] write(3, "1000", 4) = 4 [pid 6165] close(3) = 0 [pid 6165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6165] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6165] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6165] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6165] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6166 attached [pid 6166] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6165] <... clone3 resumed> => {parent_tid=[166]}, 88) = 166 [pid 6166] set_robust_list(0x7f8785c4c9a0, 24 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] <... set_robust_list resumed>) = 0 [pid 6165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], [pid 6165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] memfd_create("syzkaller", 0 [pid 6165] <... futex resumed>) = 0 [pid 6165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6166] <... memfd_create resumed>) = 3 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6166] munmap(0x7f877d82c000, 138412032) = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6166] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6166] close(3) = 0 [pid 6166] mkdir("./file0", 0777) = 0 [ 146.327201][ T6166] loop0: detected capacity change from 0 to 32768 [ 146.341456][ T6166] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6166) [ 146.357091][ T6166] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.366440][ T6166] BTRFS info (device loop0): force clearing of disk cache [ 146.373542][ T6166] BTRFS info (device loop0): setting nodatasum [ 146.380028][ T6166] BTRFS info (device loop0): allowing degraded mounts [ 146.387031][ T6166] BTRFS info (device loop0): enabling disk space caching [ 146.394139][ T6166] BTRFS info (device loop0): disk space caching is enabled [ 146.415575][ T6166] BTRFS info (device loop0): enabling ssd optimizations [ 146.422510][ T6166] BTRFS info (device loop0): auto enabling async discard [ 146.431185][ T6166] BTRFS info (device loop0): rebuilding free space tree [ 146.442867][ T6166] BTRFS info (device loop0): disabling free space tree [ 146.449840][ T6166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.459524][ T6166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6166] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6166] chdir("./file0") = 0 [pid 6166] ioctl(4, LOOP_CLR_FD) = 0 [ 146.472755][ T6166] BTRFS info (device loop0): checking UUID tree [pid 6166] close(4) = 0 [pid 6166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6165] <... futex resumed>) = 0 [pid 6166] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6165] <... futex resumed>) = 0 [pid 6166] open("./file0", O_RDONLY [pid 6165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... open resumed>) = 4 [pid 6166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] <... futex resumed>) = 0 [pid 6165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = 0 [pid 6165] <... futex resumed>) = 1 [pid 6166] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... ioctl resumed>) = 0 [pid 6166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6165] <... futex resumed>) = 0 [pid 6165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6165] <... futex resumed>) = 0 [pid 6165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6165] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6165] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6165] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6165] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[167]}, 88) = 167 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6165] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6184 attached [pid 6184] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6184] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6184] open("./file0", O_RDONLY) = 5 [pid 6184] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6165] <... futex resumed>) = 0 [pid 6184] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6184] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6165] <... futex resumed>) = 0 [ 146.568586][ T6166] BTRFS info (device loop0): balance: start -d -m [ 146.577534][ T6166] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 146.605492][ T6166] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6165] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6165] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6184] <... ioctl resumed>) = 0 [pid 6184] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 146.758933][ T6166] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 146.785253][ T6166] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6184] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] close(3) = 0 [pid 6166] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] close(4) = 0 [pid 6165] close(5) = 0 [pid 6165] close(6) = -1 EBADF (Bad file descriptor) [pid 6165] close(7) = -1 EBADF (Bad file descriptor) [ 146.804639][ T6166] BTRFS info (device loop0): balance: ended with status: 0 [pid 6165] close(8) = -1 EBADF (Bad file descriptor) [pid 6165] close(9) = -1 EBADF (Bad file descriptor) [pid 6165] close(10) = -1 EBADF (Bad file descriptor) [pid 6165] close(11) = -1 EBADF (Bad file descriptor) [pid 6165] close(12) = -1 EBADF (Bad file descriptor) [pid 6165] close(13) = -1 EBADF (Bad file descriptor) [pid 6165] close(14) = -1 EBADF (Bad file descriptor) [pid 6165] close(15) = -1 EBADF (Bad file descriptor) [pid 6165] close(16) = -1 EBADF (Bad file descriptor) [pid 6165] close(17) = -1 EBADF (Bad file descriptor) [pid 6165] close(18) = -1 EBADF (Bad file descriptor) [pid 6165] close(19) = -1 EBADF (Bad file descriptor) [pid 6165] close(20) = -1 EBADF (Bad file descriptor) [pid 6165] close(21) = -1 EBADF (Bad file descriptor) [pid 6165] close(22) = -1 EBADF (Bad file descriptor) [pid 6165] close(23) = -1 EBADF (Bad file descriptor) [pid 6165] close(24) = -1 EBADF (Bad file descriptor) [pid 6165] close(25) = -1 EBADF (Bad file descriptor) [pid 6165] close(26) = -1 EBADF (Bad file descriptor) [pid 6165] close(27) = -1 EBADF (Bad file descriptor) [pid 6165] close(28) = -1 EBADF (Bad file descriptor) [pid 6165] close(29) = -1 EBADF (Bad file descriptor) [pid 6165] exit_group(0 [pid 6184] <... futex resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 6166] <... futex resumed>) = ? [pid 6165] <... exit_group resumed>) = ? [pid 6166] +++ exited with 0 +++ [pid 6165] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=165, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./54/binderfs") = 0 [pid 5073] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./54/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./54") = 0 [pid 5073] mkdir("./55", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6185 attached , child_tidptr=0x5555570a9690) = 168 [pid 6185] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6185] chdir("./55") = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0) = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6185] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6185] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6186 attached [pid 6186] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6185] <... clone3 resumed> => {parent_tid=[169]}, 88) = 169 [pid 6186] <... rseq resumed>) = 0 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], [pid 6186] set_robust_list(0x7f8785c4c9a0, 24 [pid 6185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6186] <... set_robust_list resumed>) = 0 [pid 6185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] rt_sigprocmask(SIG_SETMASK, [], [pid 6185] <... futex resumed>) = 0 [pid 6186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6186] memfd_create("syzkaller", 0) = 3 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6186] munmap(0x7f877d82c000, 138412032) = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6186] close(3) = 0 [pid 6186] mkdir("./file0", 0777) = 0 [ 147.429537][ T6186] loop0: detected capacity change from 0 to 32768 [ 147.443217][ T6186] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6186) [ 147.459341][ T6186] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.468943][ T6186] BTRFS info (device loop0): force clearing of disk cache [ 147.476402][ T6186] BTRFS info (device loop0): setting nodatasum [ 147.482571][ T6186] BTRFS info (device loop0): allowing degraded mounts [ 147.489521][ T6186] BTRFS info (device loop0): enabling disk space caching [ 147.496656][ T6186] BTRFS info (device loop0): disk space caching is enabled [ 147.517462][ T6186] BTRFS info (device loop0): enabling ssd optimizations [ 147.524465][ T6186] BTRFS info (device loop0): auto enabling async discard [ 147.532382][ T6186] BTRFS info (device loop0): rebuilding free space tree [ 147.544971][ T6186] BTRFS info (device loop0): disabling free space tree [ 147.551862][ T6186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.561557][ T6186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6186] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6186] chdir("./file0") = 0 [pid 6186] ioctl(4, LOOP_CLR_FD) = 0 [pid 6186] close(4) = 0 [pid 6186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6186] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] open("./file0", O_RDONLY [pid 6185] <... futex resumed>) = 0 [pid 6186] <... open resumed>) = 4 [ 147.574710][ T6186] BTRFS info (device loop0): checking UUID tree [pid 6185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6186] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6186] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6186] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6185] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6185] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[170]}, 88) = 170 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6185] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6204 attached [pid 6204] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6204] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6204] open("./file0", O_RDONLY) = 5 [pid 6204] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 6204] <... futex resumed>) = 1 [pid 6204] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6204] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 147.671888][ T6186] BTRFS info (device loop0): balance: start -d -m [ 147.680911][ T6186] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 147.710155][ T6186] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6185] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6185] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6204] <... ioctl resumed>) = 0 [pid 6204] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.851412][ T6186] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 147.876451][ T6186] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6204] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6186] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] close(3 [pid 6186] <... futex resumed>) = 0 [pid 6185] <... close resumed>) = 0 [pid 6186] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] close(4) = 0 [pid 6185] close(5) = 0 [pid 6185] close(6) = -1 EBADF (Bad file descriptor) [pid 6185] close(7) = -1 EBADF (Bad file descriptor) [pid 6185] close(8) = -1 EBADF (Bad file descriptor) [pid 6185] close(9) = -1 EBADF (Bad file descriptor) [pid 6185] close(10) = -1 EBADF (Bad file descriptor) [pid 6185] close(11) = -1 EBADF (Bad file descriptor) [pid 6185] close(12) = -1 EBADF (Bad file descriptor) [pid 6185] close(13) = -1 EBADF (Bad file descriptor) [pid 6185] close(14) = -1 EBADF (Bad file descriptor) [ 147.895273][ T6186] BTRFS info (device loop0): balance: ended with status: 0 [pid 6185] close(15) = -1 EBADF (Bad file descriptor) [pid 6185] close(16) = -1 EBADF (Bad file descriptor) [pid 6185] close(17) = -1 EBADF (Bad file descriptor) [pid 6185] close(18) = -1 EBADF (Bad file descriptor) [pid 6185] close(19) = -1 EBADF (Bad file descriptor) [pid 6185] close(20) = -1 EBADF (Bad file descriptor) [pid 6185] close(21) = -1 EBADF (Bad file descriptor) [pid 6185] close(22) = -1 EBADF (Bad file descriptor) [pid 6185] close(23) = -1 EBADF (Bad file descriptor) [pid 6185] close(24) = -1 EBADF (Bad file descriptor) [pid 6185] close(25) = -1 EBADF (Bad file descriptor) [pid 6185] close(26) = -1 EBADF (Bad file descriptor) [pid 6185] close(27) = -1 EBADF (Bad file descriptor) [pid 6185] close(28) = -1 EBADF (Bad file descriptor) [pid 6185] close(29) = -1 EBADF (Bad file descriptor) [pid 6185] exit_group(0 [pid 6204] <... futex resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6186] <... futex resumed>) = ? [pid 6185] <... exit_group resumed>) = ? [pid 6186] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=168, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./55/binderfs") = 0 [pid 5073] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./55/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./55") = 0 [pid 5073] mkdir("./56", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6205 attached , child_tidptr=0x5555570a9690) = 171 [pid 6205] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6205] chdir("./56") = 0 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6205] write(3, "1000", 4) = 4 [pid 6205] close(3) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6205] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6205] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6206 attached => {parent_tid=[172]}, 88) = 172 [pid 6206] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], [pid 6206] <... rseq resumed>) = 0 [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6206] set_robust_list(0x7f8785c4c9a0, 24 [pid 6205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6205] <... futex resumed>) = 0 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6206] memfd_create("syzkaller", 0) = 3 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6206] munmap(0x7f877d82c000, 138412032) = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6206] close(3) = 0 [pid 6206] mkdir("./file0", 0777) = 0 [ 148.579056][ T6206] loop0: detected capacity change from 0 to 32768 [ 148.593576][ T6206] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6206) [ 148.609224][ T6206] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.618555][ T6206] BTRFS info (device loop0): force clearing of disk cache [ 148.625707][ T6206] BTRFS info (device loop0): setting nodatasum [ 148.631881][ T6206] BTRFS info (device loop0): allowing degraded mounts [ 148.638752][ T6206] BTRFS info (device loop0): enabling disk space caching [ 148.645829][ T6206] BTRFS info (device loop0): disk space caching is enabled [ 148.667710][ T6206] BTRFS info (device loop0): enabling ssd optimizations [ 148.674696][ T6206] BTRFS info (device loop0): auto enabling async discard [ 148.683019][ T6206] BTRFS info (device loop0): rebuilding free space tree [ 148.695210][ T6206] BTRFS info (device loop0): disabling free space tree [ 148.702089][ T6206] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.711764][ T6206] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6206] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6206] chdir("./file0") = 0 [pid 6206] ioctl(4, LOOP_CLR_FD) = 0 [pid 6206] close(4) = 0 [pid 6206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [ 148.725371][ T6206] BTRFS info (device loop0): checking UUID tree [pid 6206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] open("./file0", O_RDONLY [pid 6205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] <... open resumed>) = 4 [pid 6206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6206] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6205] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6205] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[173]}, 88) = 173 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6205] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6224 attached [pid 6224] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6224] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6224] open("./file0", O_RDONLY) = 5 [pid 6224] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6224] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6205] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 148.792361][ T6206] BTRFS info (device loop0): balance: start -d -m [ 148.804239][ T6206] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 148.832417][ T6206] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6205] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6205] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6224] <... ioctl resumed>) = 0 [pid 6224] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 149.011414][ T6206] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 149.036764][ T6206] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6224] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] close(3) = 0 [pid 6205] close(4) = 0 [pid 6205] close(5) = 0 [pid 6205] close(6 [pid 6206] <... futex resumed>) = 0 [pid 6205] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6205] close(7) = -1 EBADF (Bad file descriptor) [pid 6205] close(8) = -1 EBADF (Bad file descriptor) [pid 6205] close(9) = -1 EBADF (Bad file descriptor) [pid 6205] close(10 [pid 6206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6205] close(11) = -1 EBADF (Bad file descriptor) [pid 6205] close(12) = -1 EBADF (Bad file descriptor) [pid 6205] close(13) = -1 EBADF (Bad file descriptor) [pid 6205] close(14) = -1 EBADF (Bad file descriptor) [ 149.056254][ T6206] BTRFS info (device loop0): balance: ended with status: 0 [pid 6205] close(15) = -1 EBADF (Bad file descriptor) [pid 6205] close(16) = -1 EBADF (Bad file descriptor) [pid 6205] close(17) = -1 EBADF (Bad file descriptor) [pid 6205] close(18) = -1 EBADF (Bad file descriptor) [pid 6205] close(19) = -1 EBADF (Bad file descriptor) [pid 6205] close(20) = -1 EBADF (Bad file descriptor) [pid 6205] close(21) = -1 EBADF (Bad file descriptor) [pid 6205] close(22) = -1 EBADF (Bad file descriptor) [pid 6205] close(23) = -1 EBADF (Bad file descriptor) [pid 6205] close(24) = -1 EBADF (Bad file descriptor) [pid 6205] close(25) = -1 EBADF (Bad file descriptor) [pid 6205] close(26) = -1 EBADF (Bad file descriptor) [pid 6205] close(27) = -1 EBADF (Bad file descriptor) [pid 6205] close(28) = -1 EBADF (Bad file descriptor) [pid 6205] close(29) = -1 EBADF (Bad file descriptor) [pid 6205] exit_group(0 [pid 6224] <... futex resumed>) = ? [pid 6206] <... futex resumed>) = ? [pid 6205] <... exit_group resumed>) = ? [pid 6224] +++ exited with 0 +++ [pid 6206] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=171, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./56/binderfs") = 0 [pid 5073] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./56/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./56") = 0 [pid 5073] mkdir("./57", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6225 attached [pid 6225] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 174 [pid 6225] <... set_robust_list resumed>) = 0 [pid 6225] chdir("./57") = 0 [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6225] setpgid(0, 0) = 0 [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6225] write(3, "1000", 4) = 4 [pid 6225] close(3) = 0 [pid 6225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6225] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6225] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6226 attached [pid 6226] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6225] <... clone3 resumed> => {parent_tid=[175]}, 88) = 175 [pid 6226] set_robust_list(0x7f8785c4c9a0, 24 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] rt_sigprocmask(SIG_SETMASK, [], [pid 6225] <... futex resumed>) = 0 [pid 6226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6226] memfd_create("syzkaller", 0 [pid 6225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6226] <... memfd_create resumed>) = 3 [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6226] munmap(0x7f877d82c000, 138412032) = 0 [pid 6226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6226] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6226] close(3) = 0 [pid 6226] mkdir("./file0", 0777) = 0 [ 149.655314][ T6226] loop0: detected capacity change from 0 to 32768 [ 149.680830][ T6226] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6226) [ 149.696904][ T6226] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 149.706157][ T6226] BTRFS info (device loop0): force clearing of disk cache [ 149.713273][ T6226] BTRFS info (device loop0): setting nodatasum [ 149.719529][ T6226] BTRFS info (device loop0): allowing degraded mounts [ 149.726324][ T6226] BTRFS info (device loop0): enabling disk space caching [ 149.733328][ T6226] BTRFS info (device loop0): disk space caching is enabled [ 149.754485][ T6226] BTRFS info (device loop0): enabling ssd optimizations [ 149.761451][ T6226] BTRFS info (device loop0): auto enabling async discard [ 149.769715][ T6226] BTRFS info (device loop0): rebuilding free space tree [ 149.781873][ T6226] BTRFS info (device loop0): disabling free space tree [ 149.789157][ T6226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6226] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6226] chdir("./file0") = 0 [pid 6226] ioctl(4, LOOP_CLR_FD) = 0 [pid 6226] close(4) = 0 [pid 6226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6226] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] open("./file0", O_RDONLY [pid 6225] <... futex resumed>) = 0 [pid 6226] <... open resumed>) = 4 [ 149.799007][ T6226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.812630][ T6226] BTRFS info (device loop0): checking UUID tree [pid 6225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6226] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6226] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6226] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] <... futex resumed>) = 0 [pid 6225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] <... futex resumed>) = 0 [pid 6225] <... futex resumed>) = 1 [pid 6226] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 149.896458][ T6226] BTRFS info (device loop0): balance: start -d -m [ 149.905834][ T6226] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6225] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6225] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[176]}, 88) = 176 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6225] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6244 attached [pid 6244] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6244] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6244] open("./file0", O_RDONLY) = 5 [pid 6244] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6225] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6225] <... futex resumed>) = 0 [ 149.937521][ T6226] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6225] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6225] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6225] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6244] <... ioctl resumed>) = 0 [pid 6244] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 150.057734][ T6226] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6244] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6226] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] close(3) = 0 [pid 6225] close(4) = 0 [pid 6225] close(5) = 0 [pid 6225] close(6) = -1 EBADF (Bad file descriptor) [pid 6225] close(7) = -1 EBADF (Bad file descriptor) [pid 6225] close(8) = -1 EBADF (Bad file descriptor) [pid 6225] close(9) = -1 EBADF (Bad file descriptor) [pid 6225] close(10) = -1 EBADF (Bad file descriptor) [pid 6225] close(11) = -1 EBADF (Bad file descriptor) [pid 6225] close(12) = -1 EBADF (Bad file descriptor) [pid 6225] close(13) = -1 EBADF (Bad file descriptor) [pid 6225] close(14) = -1 EBADF (Bad file descriptor) [pid 6225] close(15) = -1 EBADF (Bad file descriptor) [pid 6225] close(16) = -1 EBADF (Bad file descriptor) [pid 6225] close(17) = -1 EBADF (Bad file descriptor) [pid 6225] close(18) = -1 EBADF (Bad file descriptor) [pid 6225] close(19) = -1 EBADF (Bad file descriptor) [pid 6225] close(20) = -1 EBADF (Bad file descriptor) [pid 6225] close(21) = -1 EBADF (Bad file descriptor) [pid 6225] close(22) = -1 EBADF (Bad file descriptor) [pid 6225] close(23) = -1 EBADF (Bad file descriptor) [pid 6225] close(24) = -1 EBADF (Bad file descriptor) [pid 6225] close(25) = -1 EBADF (Bad file descriptor) [ 150.122373][ T6226] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 150.141862][ T6226] BTRFS info (device loop0): balance: ended with status: 0 [pid 6225] close(26) = -1 EBADF (Bad file descriptor) [pid 6225] close(27) = -1 EBADF (Bad file descriptor) [pid 6225] close(28) = -1 EBADF (Bad file descriptor) [pid 6225] close(29) = -1 EBADF (Bad file descriptor) [pid 6225] exit_group(0 [pid 6244] <... futex resumed>) = ? [pid 6225] <... exit_group resumed>) = ? [pid 6244] +++ exited with 0 +++ [pid 6226] <... futex resumed>) = ? [pid 6226] +++ exited with 0 +++ [pid 6225] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=174, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./57/binderfs") = 0 [pid 5073] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./57/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./57") = 0 [pid 5073] mkdir("./58", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6245 attached , child_tidptr=0x5555570a9690) = 177 [pid 6245] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6245] chdir("./58") = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6245] write(3, "1000", 4) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6245] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6246 attached [pid 6246] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6246] set_robust_list(0x7f8785c4c9a0, 24 [pid 6245] <... clone3 resumed> => {parent_tid=[178]}, 88) = 178 [pid 6246] <... set_robust_list resumed>) = 0 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], [pid 6246] rt_sigprocmask(SIG_SETMASK, [], [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] memfd_create("syzkaller", 0 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6246] <... memfd_create resumed>) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6246] munmap(0x7f877d82c000, 138412032) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6246] close(3) = 0 [pid 6246] mkdir("./file0", 0777) = 0 [ 150.715416][ T6246] loop0: detected capacity change from 0 to 32768 [ 150.730918][ T6246] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6246) [ 150.746759][ T6246] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 150.756192][ T6246] BTRFS info (device loop0): force clearing of disk cache [ 150.763288][ T6246] BTRFS info (device loop0): setting nodatasum [ 150.769502][ T6246] BTRFS info (device loop0): allowing degraded mounts [ 150.776279][ T6246] BTRFS info (device loop0): enabling disk space caching [ 150.783288][ T6246] BTRFS info (device loop0): disk space caching is enabled [ 150.805503][ T6246] BTRFS info (device loop0): enabling ssd optimizations [ 150.812513][ T6246] BTRFS info (device loop0): auto enabling async discard [ 150.820807][ T6246] BTRFS info (device loop0): rebuilding free space tree [ 150.834558][ T6246] BTRFS info (device loop0): disabling free space tree [ 150.841505][ T6246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.851354][ T6246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6246] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6246] chdir("./file0") = 0 [pid 6246] ioctl(4, LOOP_CLR_FD) = 0 [pid 6246] close(4) = 0 [pid 6246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6246] <... futex resumed>) = 1 [pid 6245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] open("./file0", O_RDONLY [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... open resumed>) = 4 [pid 6246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6246] <... futex resumed>) = 1 [pid 6245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... ioctl resumed>) = 0 [pid 6246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [ 150.864623][ T6246] BTRFS info (device loop0): checking UUID tree [pid 6245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6245] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6245] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6264 attached [pid 6264] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6245] <... clone3 resumed> => {parent_tid=[179]}, 88) = 179 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], [pid 6264] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6264] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] <... futex resumed>) = 0 [pid 6245] <... futex resumed>) = 1 [pid 6264] open("./file0", O_RDONLY [pid 6245] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... open resumed>) = 5 [pid 6264] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6264] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6245] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 150.917156][ T6246] BTRFS info (device loop0): balance: start -d -m [ 150.925696][ T6246] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 150.953451][ T6246] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6245] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6264] <... ioctl resumed>) = 0 [pid 6264] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 151.135081][ T6246] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 151.159705][ T6246] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6264] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6246] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] close(3) = 0 [pid 6245] close(4) = 0 [pid 6245] close(5) = 0 [pid 6245] close(6) = -1 EBADF (Bad file descriptor) [pid 6245] close(7) = -1 EBADF (Bad file descriptor) [pid 6245] close(8) = -1 EBADF (Bad file descriptor) [pid 6245] close(9) = -1 EBADF (Bad file descriptor) [ 151.179449][ T6246] BTRFS info (device loop0): balance: ended with status: 0 [pid 6245] close(10) = -1 EBADF (Bad file descriptor) [pid 6245] close(11) = -1 EBADF (Bad file descriptor) [pid 6245] close(12) = -1 EBADF (Bad file descriptor) [pid 6245] close(13) = -1 EBADF (Bad file descriptor) [pid 6245] close(14) = -1 EBADF (Bad file descriptor) [pid 6245] close(15) = -1 EBADF (Bad file descriptor) [pid 6245] close(16) = -1 EBADF (Bad file descriptor) [pid 6245] close(17) = -1 EBADF (Bad file descriptor) [pid 6245] close(18) = -1 EBADF (Bad file descriptor) [pid 6245] close(19) = -1 EBADF (Bad file descriptor) [pid 6245] close(20) = -1 EBADF (Bad file descriptor) [pid 6245] close(21) = -1 EBADF (Bad file descriptor) [pid 6245] close(22) = -1 EBADF (Bad file descriptor) [pid 6245] close(23) = -1 EBADF (Bad file descriptor) [pid 6245] close(24) = -1 EBADF (Bad file descriptor) [pid 6245] close(25) = -1 EBADF (Bad file descriptor) [pid 6245] close(26) = -1 EBADF (Bad file descriptor) [pid 6245] close(27) = -1 EBADF (Bad file descriptor) [pid 6245] close(28) = -1 EBADF (Bad file descriptor) [pid 6245] close(29) = -1 EBADF (Bad file descriptor) [pid 6245] exit_group(0 [pid 6264] <... futex resumed>) = ? [pid 6246] <... futex resumed>) = ? [pid 6245] <... exit_group resumed>) = ? [pid 6246] +++ exited with 0 +++ [pid 6264] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=177, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./58/binderfs") = 0 [pid 5073] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./58/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./58") = 0 [pid 5073] mkdir("./59", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6265 attached , child_tidptr=0x5555570a9690) = 180 [pid 6265] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6265] chdir("./59") = 0 [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6265] setpgid(0, 0) = 0 [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6265] write(3, "1000", 4) = 4 [pid 6265] close(3) = 0 [pid 6265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6265] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6265] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6266 attached [pid 6266] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6265] <... clone3 resumed> => {parent_tid=[181]}, 88) = 181 [pid 6266] <... rseq resumed>) = 0 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], [pid 6266] set_robust_list(0x7f8785c4c9a0, 24 [pid 6265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6266] <... set_robust_list resumed>) = 0 [pid 6265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] rt_sigprocmask(SIG_SETMASK, [], [pid 6265] <... futex resumed>) = 0 [pid 6266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6266] memfd_create("syzkaller", 0) = 3 [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6266] munmap(0x7f877d82c000, 138412032) = 0 [pid 6266] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6266] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6266] close(3) = 0 [pid 6266] mkdir("./file0", 0777) = 0 [ 151.810479][ T6266] loop0: detected capacity change from 0 to 32768 [ 151.834930][ T6266] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6266) [ 151.850658][ T6266] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.860019][ T6266] BTRFS info (device loop0): force clearing of disk cache [ 151.867196][ T6266] BTRFS info (device loop0): setting nodatasum [ 151.873356][ T6266] BTRFS info (device loop0): allowing degraded mounts [ 151.880198][ T6266] BTRFS info (device loop0): enabling disk space caching [ 151.887293][ T6266] BTRFS info (device loop0): disk space caching is enabled [ 151.909784][ T6266] BTRFS info (device loop0): enabling ssd optimizations [ 151.916802][ T6266] BTRFS info (device loop0): auto enabling async discard [ 151.925222][ T6266] BTRFS info (device loop0): rebuilding free space tree [ 151.937998][ T6266] BTRFS info (device loop0): disabling free space tree [ 151.945036][ T6266] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6266] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6266] chdir("./file0") = 0 [pid 6266] ioctl(4, LOOP_CLR_FD) = 0 [pid 6266] close(4) = 0 [pid 6266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6266] open("./file0", O_RDONLY [pid 6265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] <... open resumed>) = 4 [ 151.954799][ T6266] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.968097][ T6266] BTRFS info (device loop0): checking UUID tree [pid 6265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6266] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] <... futex resumed>) = 0 [pid 6265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6266] <... futex resumed>) = 0 [pid 6266] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 152.051393][ T6266] BTRFS info (device loop0): balance: start -d -m [ 152.059982][ T6266] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6266] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6265] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6265] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[182]}, 88) = 182 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6265] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6284 attached [pid 6284] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6284] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6284] open("./file0", O_RDONLY) = 5 [pid 6284] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6284] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = 0 [pid 6265] <... futex resumed>) = 1 [pid 6284] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 152.094136][ T6266] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6265] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6284] <... ioctl resumed>) = 0 [ 152.204529][ T6266] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6284] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] close(3) = 0 [pid 6265] close(4) = 0 [pid 6265] close(5) = 0 [pid 6265] close(6) = -1 EBADF (Bad file descriptor) [pid 6265] close(7) = -1 EBADF (Bad file descriptor) [pid 6265] close(8) = -1 EBADF (Bad file descriptor) [pid 6265] close(9) = -1 EBADF (Bad file descriptor) [pid 6265] close(10) = -1 EBADF (Bad file descriptor) [pid 6265] close(11) = -1 EBADF (Bad file descriptor) [pid 6265] close(12) = -1 EBADF (Bad file descriptor) [pid 6265] close(13) = -1 EBADF (Bad file descriptor) [pid 6265] close(14) = -1 EBADF (Bad file descriptor) [ 152.272390][ T6266] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 152.293981][ T6266] BTRFS info (device loop0): balance: ended with status: 0 [pid 6265] close(15) = -1 EBADF (Bad file descriptor) [pid 6265] close(16) = -1 EBADF (Bad file descriptor) [pid 6265] close(17) = -1 EBADF (Bad file descriptor) [pid 6265] close(18) = -1 EBADF (Bad file descriptor) [pid 6265] close(19) = -1 EBADF (Bad file descriptor) [pid 6265] close(20) = -1 EBADF (Bad file descriptor) [pid 6265] close(21) = -1 EBADF (Bad file descriptor) [pid 6265] close(22) = -1 EBADF (Bad file descriptor) [pid 6265] close(23) = -1 EBADF (Bad file descriptor) [pid 6265] close(24) = -1 EBADF (Bad file descriptor) [pid 6265] close(25) = -1 EBADF (Bad file descriptor) [pid 6265] close(26) = -1 EBADF (Bad file descriptor) [pid 6265] close(27) = -1 EBADF (Bad file descriptor) [pid 6265] close(28) = -1 EBADF (Bad file descriptor) [pid 6265] close(29) = -1 EBADF (Bad file descriptor) [pid 6265] exit_group(0 [pid 6284] <... futex resumed>) = ? [pid 6266] <... futex resumed>) = ? [pid 6265] <... exit_group resumed>) = ? [pid 6284] +++ exited with 0 +++ [pid 6266] +++ exited with 0 +++ [pid 6265] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=180, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./59/binderfs") = 0 [pid 5073] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./59/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./59") = 0 [pid 5073] mkdir("./60", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6285 attached , child_tidptr=0x5555570a9690) = 183 [pid 6285] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6285] chdir("./60") = 0 [pid 6285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6285] setpgid(0, 0) = 0 [pid 6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6285] write(3, "1000", 4) = 4 [pid 6285] close(3) = 0 [pid 6285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6285] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6285] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6286 attached [pid 6286] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6286] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6285] <... clone3 resumed> => {parent_tid=[184]}, 88) = 184 [pid 6286] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] rt_sigprocmask(SIG_SETMASK, [], [pid 6286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6286] memfd_create("syzkaller", 0 [pid 6285] <... futex resumed>) = 0 [pid 6285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6286] <... memfd_create resumed>) = 3 [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6286] munmap(0x7f877d82c000, 138412032) = 0 [pid 6286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6286] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6286] close(3) = 0 [pid 6286] mkdir("./file0", 0777) = 0 [ 153.030816][ T6286] loop0: detected capacity change from 0 to 32768 [ 153.056215][ T6286] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6286) [ 153.072194][ T6286] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.081455][ T6286] BTRFS info (device loop0): force clearing of disk cache [ 153.088597][ T6286] BTRFS info (device loop0): setting nodatasum [ 153.094777][ T6286] BTRFS info (device loop0): allowing degraded mounts [ 153.101528][ T6286] BTRFS info (device loop0): enabling disk space caching [ 153.108571][ T6286] BTRFS info (device loop0): disk space caching is enabled [ 153.130730][ T6286] BTRFS info (device loop0): enabling ssd optimizations [ 153.137804][ T6286] BTRFS info (device loop0): auto enabling async discard [ 153.146055][ T6286] BTRFS info (device loop0): rebuilding free space tree [ 153.159686][ T6286] BTRFS info (device loop0): disabling free space tree [ 153.166686][ T6286] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6286] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6286] chdir("./file0") = 0 [pid 6286] ioctl(4, LOOP_CLR_FD) = 0 [pid 6286] close(4) = 0 [pid 6286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6285] <... futex resumed>) = 0 [pid 6286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6285] <... futex resumed>) = 0 [pid 6286] open("./file0", O_RDONLY [pid 6285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6286] <... open resumed>) = 4 [pid 6286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = 1 [pid 6285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6285] <... futex resumed>) = 0 [pid 6285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6286] <... ioctl resumed>) = 0 [pid 6286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6285] <... futex resumed>) = 0 [pid 6286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6285] <... futex resumed>) = 0 [pid 6286] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 153.176713][ T6286] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.190554][ T6286] BTRFS info (device loop0): checking UUID tree [pid 6285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6285] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6285] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6304 attached => {parent_tid=[185]}, 88) = 185 [pid 6304] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6304] <... rseq resumed>) = 0 [pid 6304] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 153.228083][ T6286] BTRFS info (device loop0): balance: start -d -m [ 153.236131][ T6286] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 153.262521][ T6286] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6304] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 0 [pid 6285] <... futex resumed>) = 1 [pid 6304] open("./file0", O_RDONLY) = 5 [pid 6304] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = 0 [pid 6304] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6285] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6304] <... futex resumed>) = 0 [pid 6285] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 153.322722][ T6286] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6304] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 153.415442][ T6286] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6304] <... ioctl resumed>) = 0 [pid 6304] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6304] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6286] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] close(3 [pid 6286] <... futex resumed>) = 0 [pid 6285] <... close resumed>) = 0 [pid 6286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] close(4) = 0 [pid 6285] close(5) = 0 [pid 6285] close(6) = -1 EBADF (Bad file descriptor) [pid 6285] close(7) = -1 EBADF (Bad file descriptor) [pid 6285] close(8) = -1 EBADF (Bad file descriptor) [pid 6285] close(9) = -1 EBADF (Bad file descriptor) [pid 6285] close(10) = -1 EBADF (Bad file descriptor) [pid 6285] close(11) = -1 EBADF (Bad file descriptor) [pid 6285] close(12) = -1 EBADF (Bad file descriptor) [pid 6285] close(13) = -1 EBADF (Bad file descriptor) [pid 6285] close(14) = -1 EBADF (Bad file descriptor) [pid 6285] close(15) = -1 EBADF (Bad file descriptor) [pid 6285] close(16) = -1 EBADF (Bad file descriptor) [pid 6285] close(17) = -1 EBADF (Bad file descriptor) [pid 6285] close(18) = -1 EBADF (Bad file descriptor) [ 153.476440][ T6286] BTRFS info (device loop0): balance: ended with status: 0 [pid 6285] close(19) = -1 EBADF (Bad file descriptor) [pid 6285] close(20) = -1 EBADF (Bad file descriptor) [pid 6285] close(21) = -1 EBADF (Bad file descriptor) [pid 6285] close(22) = -1 EBADF (Bad file descriptor) [pid 6285] close(23) = -1 EBADF (Bad file descriptor) [pid 6285] close(24) = -1 EBADF (Bad file descriptor) [pid 6285] close(25) = -1 EBADF (Bad file descriptor) [pid 6285] close(26) = -1 EBADF (Bad file descriptor) [pid 6285] close(27) = -1 EBADF (Bad file descriptor) [pid 6285] close(28) = -1 EBADF (Bad file descriptor) [pid 6285] close(29) = -1 EBADF (Bad file descriptor) [pid 6285] exit_group(0 [pid 6304] <... futex resumed>) = ? [pid 6286] <... futex resumed>) = ? [pid 6285] <... exit_group resumed>) = ? [pid 6304] +++ exited with 0 +++ [pid 6286] +++ exited with 0 +++ [pid 6285] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=183, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=47 /* 0.47 s */} --- [pid 5073] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./60/binderfs") = 0 [pid 5073] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./60/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./60") = 0 [pid 5073] mkdir("./61", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6305 attached , child_tidptr=0x5555570a9690) = 186 [pid 6305] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6305] chdir("./61") = 0 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6305] setpgid(0, 0) = 0 [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6305] write(3, "1000", 4) = 4 [pid 6305] close(3) = 0 [pid 6305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6305] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6305] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6306 attached [pid 6306] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6306] set_robust_list(0x7f8785c4c9a0, 24 [pid 6305] <... clone3 resumed> => {parent_tid=[187]}, 88) = 187 [pid 6306] <... set_robust_list resumed>) = 0 [pid 6305] rt_sigprocmask(SIG_SETMASK, [], [pid 6306] rt_sigprocmask(SIG_SETMASK, [], [pid 6305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6306] memfd_create("syzkaller", 0 [pid 6305] <... futex resumed>) = 0 [pid 6305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6306] <... memfd_create resumed>) = 3 [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6306] munmap(0x7f877d82c000, 138412032) = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6306] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6306] close(3) = 0 [pid 6306] mkdir("./file0", 0777) = 0 [ 154.062176][ T6306] loop0: detected capacity change from 0 to 32768 [ 154.077957][ T6306] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6306) [ 154.094894][ T6306] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 154.104173][ T6306] BTRFS info (device loop0): force clearing of disk cache [ 154.111269][ T6306] BTRFS info (device loop0): setting nodatasum [ 154.117496][ T6306] BTRFS info (device loop0): allowing degraded mounts [ 154.124402][ T6306] BTRFS info (device loop0): enabling disk space caching [ 154.131423][ T6306] BTRFS info (device loop0): disk space caching is enabled [ 154.153367][ T6306] BTRFS info (device loop0): enabling ssd optimizations [ 154.160380][ T6306] BTRFS info (device loop0): auto enabling async discard [ 154.168728][ T6306] BTRFS info (device loop0): rebuilding free space tree [ 154.180514][ T6306] BTRFS info (device loop0): disabling free space tree [ 154.187571][ T6306] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.197276][ T6306] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6306] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6306] chdir("./file0") = 0 [pid 6306] ioctl(4, LOOP_CLR_FD) = 0 [pid 6306] close(4) = 0 [pid 6306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = 0 [pid 6305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6306] <... futex resumed>) = 1 [pid 6306] open("./file0", O_RDONLY) = 4 [pid 6306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6305] <... futex resumed>) = 0 [pid 6306] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6306] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6305] <... futex resumed>) = 0 [pid 6306] <... ioctl resumed>) = 0 [pid 6305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6306] <... futex resumed>) = 0 [pid 6305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6306] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6305] <... futex resumed>) = 0 [ 154.211001][ T6306] BTRFS info (device loop0): checking UUID tree [pid 6305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6305] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6305] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[188]}, 88) = 188 ./strace-static-x86_64: Process 6324 attached [pid 6305] rt_sigprocmask(SIG_SETMASK, [], [pid 6324] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6324] <... rseq resumed>) = 0 [pid 6324] set_robust_list(0x7f8785c2b9a0, 24 [pid 6305] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6324] <... set_robust_list resumed>) = 0 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6324] open("./file0", O_RDONLY) = 5 [pid 6324] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 154.253482][ T6306] BTRFS info (device loop0): balance: start -d -m [ 154.262240][ T6306] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 154.286891][ T6306] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6305] <... futex resumed>) = 0 [pid 6324] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = 0 [pid 6305] <... futex resumed>) = 1 [pid 6324] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6305] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6305] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6305] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 154.381086][ T6306] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6324] <... ioctl resumed>) = 0 [pid 6324] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6324] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6306] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] close(3 [pid 6306] <... futex resumed>) = 0 [pid 6305] <... close resumed>) = 0 [pid 6306] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] close(4) = 0 [pid 6305] close(5) = 0 [pid 6305] close(6) = -1 EBADF (Bad file descriptor) [pid 6305] close(7) = -1 EBADF (Bad file descriptor) [pid 6305] close(8) = -1 EBADF (Bad file descriptor) [pid 6305] close(9) = -1 EBADF (Bad file descriptor) [pid 6305] close(10) = -1 EBADF (Bad file descriptor) [pid 6305] close(11) = -1 EBADF (Bad file descriptor) [pid 6305] close(12) = -1 EBADF (Bad file descriptor) [pid 6305] close(13) = -1 EBADF (Bad file descriptor) [pid 6305] close(14) = -1 EBADF (Bad file descriptor) [ 154.485532][ T6306] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 154.504690][ T6306] BTRFS info (device loop0): balance: ended with status: 0 [pid 6305] close(15) = -1 EBADF (Bad file descriptor) [pid 6305] close(16) = -1 EBADF (Bad file descriptor) [pid 6305] close(17) = -1 EBADF (Bad file descriptor) [pid 6305] close(18) = -1 EBADF (Bad file descriptor) [pid 6305] close(19) = -1 EBADF (Bad file descriptor) [pid 6305] close(20) = -1 EBADF (Bad file descriptor) [pid 6305] close(21) = -1 EBADF (Bad file descriptor) [pid 6305] close(22) = -1 EBADF (Bad file descriptor) [pid 6305] close(23) = -1 EBADF (Bad file descriptor) [pid 6305] close(24) = -1 EBADF (Bad file descriptor) [pid 6305] close(25) = -1 EBADF (Bad file descriptor) [pid 6305] close(26) = -1 EBADF (Bad file descriptor) [pid 6305] close(27) = -1 EBADF (Bad file descriptor) [pid 6305] close(28) = -1 EBADF (Bad file descriptor) [pid 6305] close(29) = -1 EBADF (Bad file descriptor) [pid 6305] exit_group(0 [pid 6306] <... futex resumed>) = ? [pid 6305] <... exit_group resumed>) = ? [pid 6306] +++ exited with 0 +++ [pid 6324] <... futex resumed>) = ? [pid 6324] +++ exited with 0 +++ [pid 6305] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=186, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./61/binderfs") = 0 [pid 5073] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./61/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./61") = 0 [pid 5073] mkdir("./62", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6325 attached , child_tidptr=0x5555570a9690) = 189 [pid 6325] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6325] chdir("./62") = 0 [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6325] setpgid(0, 0) = 0 [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6325] write(3, "1000", 4) = 4 [pid 6325] close(3) = 0 [pid 6325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6325] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6325] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6326 attached => {parent_tid=[190]}, 88) = 190 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6325] <... futex resumed>) = 0 [pid 6326] set_robust_list(0x7f8785c4c9a0, 24 [pid 6325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6326] <... set_robust_list resumed>) = 0 [pid 6326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6326] memfd_create("syzkaller", 0) = 3 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6326] munmap(0x7f877d82c000, 138412032) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6326] close(3) = 0 [pid 6326] mkdir("./file0", 0777) = 0 [ 155.101474][ T6326] loop0: detected capacity change from 0 to 32768 [ 155.125930][ T6326] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6326) [ 155.141992][ T6326] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 155.151575][ T6326] BTRFS info (device loop0): force clearing of disk cache [ 155.158762][ T6326] BTRFS info (device loop0): setting nodatasum [ 155.165293][ T6326] BTRFS info (device loop0): allowing degraded mounts [ 155.172070][ T6326] BTRFS info (device loop0): enabling disk space caching [ 155.179161][ T6326] BTRFS info (device loop0): disk space caching is enabled [ 155.200723][ T6326] BTRFS info (device loop0): enabling ssd optimizations [ 155.207731][ T6326] BTRFS info (device loop0): auto enabling async discard [ 155.215843][ T6326] BTRFS info (device loop0): rebuilding free space tree [ 155.227870][ T6326] BTRFS info (device loop0): disabling free space tree [ 155.234823][ T6326] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6326] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6326] chdir("./file0") = 0 [pid 6326] ioctl(4, LOOP_CLR_FD) = 0 [pid 6326] close(4) = 0 [pid 6326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6325] <... futex resumed>) = 0 [pid 6325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] open("./file0", O_RDONLY) = 4 [pid 6325] <... futex resumed>) = 0 [pid 6326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 0 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6325] <... futex resumed>) = 0 [pid 6326] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... ioctl resumed>) = 0 [pid 6326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6326] <... futex resumed>) = 0 [pid 6326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6325] <... futex resumed>) = 0 [pid 6326] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 155.244498][ T6326] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.257727][ T6326] BTRFS info (device loop0): checking UUID tree [pid 6325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6325] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6325] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[191]}, 88) = 191 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6325] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6344 attached [pid 6325] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6344] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6344] open("./file0", O_RDONLY) = 5 [pid 6344] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] <... futex resumed>) = 0 [pid 6344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6325] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [ 155.311593][ T6326] BTRFS info (device loop0): balance: start -d -m [ 155.320536][ T6326] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 155.343325][ T6326] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6344] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6325] <... futex resumed>) = 0 [pid 6325] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6344] <... ioctl resumed>) = 0 [pid 6344] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 155.510197][ T6326] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 155.535959][ T6326] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6344] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6326] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] close(3 [pid 6326] <... futex resumed>) = 0 [pid 6326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] <... close resumed>) = 0 [pid 6325] close(4) = 0 [pid 6325] close(5) = 0 [pid 6325] close(6) = -1 EBADF (Bad file descriptor) [pid 6325] close(7) = -1 EBADF (Bad file descriptor) [pid 6325] close(8) = -1 EBADF (Bad file descriptor) [pid 6325] close(9) = -1 EBADF (Bad file descriptor) [ 155.554895][ T6326] BTRFS info (device loop0): balance: ended with status: 0 [pid 6325] close(10) = -1 EBADF (Bad file descriptor) [pid 6325] close(11) = -1 EBADF (Bad file descriptor) [pid 6325] close(12) = -1 EBADF (Bad file descriptor) [pid 6325] close(13) = -1 EBADF (Bad file descriptor) [pid 6325] close(14) = -1 EBADF (Bad file descriptor) [pid 6325] close(15) = -1 EBADF (Bad file descriptor) [pid 6325] close(16) = -1 EBADF (Bad file descriptor) [pid 6325] close(17) = -1 EBADF (Bad file descriptor) [pid 6325] close(18) = -1 EBADF (Bad file descriptor) [pid 6325] close(19) = -1 EBADF (Bad file descriptor) [pid 6325] close(20) = -1 EBADF (Bad file descriptor) [pid 6325] close(21) = -1 EBADF (Bad file descriptor) [pid 6325] close(22) = -1 EBADF (Bad file descriptor) [pid 6325] close(23) = -1 EBADF (Bad file descriptor) [pid 6325] close(24) = -1 EBADF (Bad file descriptor) [pid 6325] close(25) = -1 EBADF (Bad file descriptor) [pid 6325] close(26) = -1 EBADF (Bad file descriptor) [pid 6325] close(27) = -1 EBADF (Bad file descriptor) [pid 6325] close(28) = -1 EBADF (Bad file descriptor) [pid 6325] close(29) = -1 EBADF (Bad file descriptor) [pid 6325] exit_group(0 [pid 6326] <... futex resumed>) = ? [pid 6325] <... exit_group resumed>) = ? [pid 6344] <... futex resumed>) = ? [pid 6326] +++ exited with 0 +++ [pid 6344] +++ exited with 0 +++ [pid 6325] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=189, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./62/binderfs") = 0 [pid 5073] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./62/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./62") = 0 [pid 5073] mkdir("./63", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6345 attached , child_tidptr=0x5555570a9690) = 192 [pid 6345] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6345] chdir("./63") = 0 [pid 6345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6345] setpgid(0, 0) = 0 [pid 6345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6345] write(3, "1000", 4) = 4 [pid 6345] close(3) = 0 [pid 6345] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6345] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6345] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6346 attached [pid 6346] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6345] <... clone3 resumed> => {parent_tid=[193]}, 88) = 193 [pid 6346] set_robust_list(0x7f8785c4c9a0, 24 [pid 6345] rt_sigprocmask(SIG_SETMASK, [], [pid 6346] <... set_robust_list resumed>) = 0 [pid 6345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6346] rt_sigprocmask(SIG_SETMASK, [], [pid 6345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] <... futex resumed>) = 0 [pid 6346] memfd_create("syzkaller", 0 [pid 6345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6346] <... memfd_create resumed>) = 3 [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6346] munmap(0x7f877d82c000, 138412032) = 0 [pid 6346] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6346] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6346] close(3) = 0 [pid 6346] mkdir("./file0", 0777) = 0 [ 156.159754][ T6346] loop0: detected capacity change from 0 to 32768 [ 156.179359][ T6346] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6346) [ 156.195099][ T6346] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 156.204388][ T6346] BTRFS info (device loop0): force clearing of disk cache [ 156.211483][ T6346] BTRFS info (device loop0): setting nodatasum [ 156.217700][ T6346] BTRFS info (device loop0): allowing degraded mounts [ 156.224509][ T6346] BTRFS info (device loop0): enabling disk space caching [ 156.231526][ T6346] BTRFS info (device loop0): disk space caching is enabled [ 156.253241][ T6346] BTRFS info (device loop0): enabling ssd optimizations [ 156.260288][ T6346] BTRFS info (device loop0): auto enabling async discard [ 156.268392][ T6346] BTRFS info (device loop0): rebuilding free space tree [ 156.280895][ T6346] BTRFS info (device loop0): disabling free space tree [ 156.287885][ T6346] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.297547][ T6346] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6346] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6346] chdir("./file0") = 0 [pid 6346] ioctl(4, LOOP_CLR_FD) = 0 [pid 6346] close(4) = 0 [pid 6346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6345] <... futex resumed>) = 0 [pid 6345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6346] open("./file0", O_RDONLY) = 4 [pid 6346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 156.310614][ T6346] BTRFS info (device loop0): checking UUID tree [pid 6346] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6345] <... futex resumed>) = 0 [pid 6345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] <... futex resumed>) = 0 [pid 6345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6346] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6345] <... futex resumed>) = 0 [pid 6345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] <... futex resumed>) = 0 [pid 6346] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 156.411299][ T6346] BTRFS info (device loop0): balance: start -d -m [ 156.422824][ T6346] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6345] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6345] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6364 attached [pid 6364] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6345] <... clone3 resumed> => {parent_tid=[194]}, 88) = 194 [pid 6364] <... rseq resumed>) = 0 [pid 6345] rt_sigprocmask(SIG_SETMASK, [], [pid 6364] set_robust_list(0x7f8785c2b9a0, 24 [pid 6345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6364] <... set_robust_list resumed>) = 0 [pid 6345] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] rt_sigprocmask(SIG_SETMASK, [], [pid 6345] <... futex resumed>) = 0 [pid 6364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] open("./file0", O_RDONLY) = 5 [pid 6364] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6345] <... futex resumed>) = 0 [pid 6364] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6345] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6345] <... futex resumed>) = 0 [pid 6364] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 156.452416][ T6346] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6345] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6364] <... ioctl resumed>) = 0 [pid 6364] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 156.595570][ T6346] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 156.620204][ T6346] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6364] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] close(3) = 0 [pid 6345] close(4 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6345] <... close resumed>) = 0 [pid 6345] close(5) = 0 [pid 6345] close(6) = -1 EBADF (Bad file descriptor) [pid 6345] close(7) = -1 EBADF (Bad file descriptor) [ 156.640142][ T6346] BTRFS info (device loop0): balance: ended with status: 0 [pid 6345] close(8) = -1 EBADF (Bad file descriptor) [pid 6345] close(9) = -1 EBADF (Bad file descriptor) [pid 6345] close(10) = -1 EBADF (Bad file descriptor) [pid 6345] close(11) = -1 EBADF (Bad file descriptor) [pid 6345] close(12) = -1 EBADF (Bad file descriptor) [pid 6345] close(13) = -1 EBADF (Bad file descriptor) [pid 6345] close(14) = -1 EBADF (Bad file descriptor) [pid 6345] close(15) = -1 EBADF (Bad file descriptor) [pid 6345] close(16) = -1 EBADF (Bad file descriptor) [pid 6345] close(17) = -1 EBADF (Bad file descriptor) [pid 6345] close(18) = -1 EBADF (Bad file descriptor) [pid 6345] close(19) = -1 EBADF (Bad file descriptor) [pid 6345] close(20) = -1 EBADF (Bad file descriptor) [pid 6345] close(21) = -1 EBADF (Bad file descriptor) [pid 6345] close(22) = -1 EBADF (Bad file descriptor) [pid 6345] close(23) = -1 EBADF (Bad file descriptor) [pid 6345] close(24) = -1 EBADF (Bad file descriptor) [pid 6345] close(25) = -1 EBADF (Bad file descriptor) [pid 6345] close(26) = -1 EBADF (Bad file descriptor) [pid 6345] close(27) = -1 EBADF (Bad file descriptor) [pid 6345] close(28) = -1 EBADF (Bad file descriptor) [pid 6345] close(29) = -1 EBADF (Bad file descriptor) [pid 6345] exit_group(0 [pid 6346] <... futex resumed>) = ? [pid 6345] <... exit_group resumed>) = ? [pid 6346] +++ exited with 0 +++ [pid 6364] <... futex resumed>) = ? [pid 6364] +++ exited with 0 +++ [pid 6345] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=192, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./63/binderfs") = 0 [pid 5073] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./63/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./63") = 0 [pid 5073] mkdir("./64", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6365 attached , child_tidptr=0x5555570a9690) = 195 [pid 6365] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6365] chdir("./64") = 0 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4) = 4 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6365] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6365] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6366 attached [pid 6366] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6366] set_robust_list(0x7f8785c4c9a0, 24 [pid 6365] <... clone3 resumed> => {parent_tid=[196]}, 88) = 196 [pid 6366] <... set_robust_list resumed>) = 0 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6366] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] memfd_create("syzkaller", 0 [pid 6365] <... futex resumed>) = 0 [pid 6365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6366] <... memfd_create resumed>) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6366] munmap(0x7f877d82c000, 138412032) = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6366] close(3) = 0 [pid 6366] mkdir("./file0", 0777) = 0 [ 157.269483][ T6366] loop0: detected capacity change from 0 to 32768 [ 157.303086][ T6366] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6366) [ 157.319650][ T6366] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 157.328923][ T6366] BTRFS info (device loop0): force clearing of disk cache [ 157.336063][ T6366] BTRFS info (device loop0): setting nodatasum [ 157.342207][ T6366] BTRFS info (device loop0): allowing degraded mounts [ 157.349033][ T6366] BTRFS info (device loop0): enabling disk space caching [ 157.356074][ T6366] BTRFS info (device loop0): disk space caching is enabled [ 157.378097][ T6366] BTRFS info (device loop0): enabling ssd optimizations [ 157.385519][ T6366] BTRFS info (device loop0): auto enabling async discard [ 157.394089][ T6366] BTRFS info (device loop0): rebuilding free space tree [ 157.405831][ T6366] BTRFS info (device loop0): disabling free space tree [ 157.412707][ T6366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6366] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6366] chdir("./file0") = 0 [pid 6366] ioctl(4, LOOP_CLR_FD) = 0 [pid 6366] close(4) = 0 [pid 6366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6366] open("./file0", O_RDONLY [pid 6365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... open resumed>) = 4 [pid 6366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] <... futex resumed>) = 0 [pid 6366] <... futex resumed>) = 1 [pid 6366] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] <... ioctl resumed>) = 0 [pid 6365] <... futex resumed>) = 0 [pid 6366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6366] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 157.422386][ T6366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.435350][ T6366] BTRFS info (device loop0): checking UUID tree [pid 6365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... futex resumed>) = 0 [pid 6366] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 157.508846][ T6366] BTRFS info (device loop0): balance: start -d -m [ 157.520845][ T6366] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6365] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[197]}, 88) = 197 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6365] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6384 attached [pid 6384] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6384] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6384] open("./file0", O_RDONLY) = 5 [pid 6384] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6384] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6365] <... futex resumed>) = 0 [pid 6365] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 157.549697][ T6366] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6384] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6384] <... ioctl resumed>) = 0 [pid 6384] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6366] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 6366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6366] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] close(3) = 0 [pid 6365] close(4) = 0 [pid 6365] close(5) = 0 [pid 6365] close(6) = -1 EBADF (Bad file descriptor) [pid 6365] close(7) = -1 EBADF (Bad file descriptor) [pid 6365] close(8) = -1 EBADF (Bad file descriptor) [pid 6365] close(9) = -1 EBADF (Bad file descriptor) [pid 6365] close(10) = -1 EBADF (Bad file descriptor) [pid 6365] close(11) = -1 EBADF (Bad file descriptor) [pid 6365] close(12) = -1 EBADF (Bad file descriptor) [pid 6365] close(13) = -1 EBADF (Bad file descriptor) [ 157.711266][ T6366] BTRFS info (device loop0): 1 enospc errors during balance [ 157.719203][ T6366] BTRFS info (device loop0): balance: ended with status: -28 [pid 6365] close(14) = -1 EBADF (Bad file descriptor) [pid 6365] close(15) = -1 EBADF (Bad file descriptor) [pid 6365] close(16) = -1 EBADF (Bad file descriptor) [pid 6365] close(17) = -1 EBADF (Bad file descriptor) [pid 6365] close(18) = -1 EBADF (Bad file descriptor) [pid 6365] close(19) = -1 EBADF (Bad file descriptor) [pid 6365] close(20) = -1 EBADF (Bad file descriptor) [pid 6365] close(21) = -1 EBADF (Bad file descriptor) [pid 6365] close(22) = -1 EBADF (Bad file descriptor) [pid 6365] close(23) = -1 EBADF (Bad file descriptor) [pid 6365] close(24) = -1 EBADF (Bad file descriptor) [pid 6365] close(25) = -1 EBADF (Bad file descriptor) [pid 6365] close(26) = -1 EBADF (Bad file descriptor) [pid 6365] close(27) = -1 EBADF (Bad file descriptor) [pid 6365] close(28) = -1 EBADF (Bad file descriptor) [pid 6365] close(29) = -1 EBADF (Bad file descriptor) [pid 6365] exit_group(0 [pid 6366] <... futex resumed>) = ? [pid 6365] <... exit_group resumed>) = ? [pid 6384] <... futex resumed>) = ? [pid 6366] +++ exited with 0 +++ [pid 6384] +++ exited with 0 +++ [pid 6365] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=195, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=34 /* 0.34 s */} --- [pid 5073] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./64/binderfs") = 0 [pid 5073] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./64/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./64") = 0 [pid 5073] mkdir("./65", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6385 attached , child_tidptr=0x5555570a9690) = 198 [pid 6385] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6385] chdir("./65") = 0 [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6385] setpgid(0, 0) = 0 [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6385] write(3, "1000", 4) = 4 [pid 6385] close(3) = 0 [pid 6385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6385] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6385] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6386 attached => {parent_tid=[199]}, 88) = 199 [pid 6386] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6385] rt_sigprocmask(SIG_SETMASK, [], [pid 6386] set_robust_list(0x7f8785c4c9a0, 24 [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6386] <... set_robust_list resumed>) = 0 [pid 6385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] rt_sigprocmask(SIG_SETMASK, [], [pid 6385] <... futex resumed>) = 0 [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6386] memfd_create("syzkaller", 0) = 3 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6386] munmap(0x7f877d82c000, 138412032) = 0 [pid 6386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6386] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6386] close(3) = 0 [pid 6386] mkdir("./file0", 0777) = 0 [ 158.255265][ T6386] loop0: detected capacity change from 0 to 32768 [ 158.280010][ T6386] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6386) [ 158.295333][ T6386] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 158.304593][ T6386] BTRFS info (device loop0): force clearing of disk cache [ 158.311689][ T6386] BTRFS info (device loop0): setting nodatasum [ 158.317871][ T6386] BTRFS info (device loop0): allowing degraded mounts [ 158.324657][ T6386] BTRFS info (device loop0): enabling disk space caching [ 158.331667][ T6386] BTRFS info (device loop0): disk space caching is enabled [ 158.354089][ T6386] BTRFS info (device loop0): enabling ssd optimizations [ 158.361039][ T6386] BTRFS info (device loop0): auto enabling async discard [ 158.369049][ T6386] BTRFS info (device loop0): rebuilding free space tree [ 158.380673][ T6386] BTRFS info (device loop0): disabling free space tree [ 158.387683][ T6386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6386] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6386] chdir("./file0") = 0 [pid 6386] ioctl(4, LOOP_CLR_FD) = 0 [pid 6386] close(4) = 0 [pid 6386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] open("./file0", O_RDONLY) = 4 [pid 6386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6386] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... ioctl resumed>) = 0 [pid 6385] <... futex resumed>) = 0 [pid 6386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [ 158.397393][ T6386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.412613][ T6386] BTRFS info (device loop0): checking UUID tree [pid 6386] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6385] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6385] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[200]}, 88) = 200 ./strace-static-x86_64: Process 6404 attached [pid 6385] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6404] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6385] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] open("./file0", O_RDONLY [pid 6385] <... futex resumed>) = 0 [pid 6404] <... open resumed>) = 5 [pid 6385] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6385] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 158.465247][ T6386] BTRFS info (device loop0): balance: start -d -m [ 158.474488][ T6386] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 158.497724][ T6386] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6404] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 158.556730][ T6386] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6404] <... ioctl resumed>) = 0 [pid 6404] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] close(3) = 0 [pid 6385] close(4) = 0 [pid 6385] close(5 [pid 6386] <... futex resumed>) = 0 [pid 6386] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... close resumed>) = 0 [pid 6385] close(6) = -1 EBADF (Bad file descriptor) [pid 6385] close(7) = -1 EBADF (Bad file descriptor) [pid 6385] close(8) = -1 EBADF (Bad file descriptor) [pid 6385] close(9) = -1 EBADF (Bad file descriptor) [pid 6385] close(10) = -1 EBADF (Bad file descriptor) [pid 6385] close(11) = -1 EBADF (Bad file descriptor) [pid 6385] close(12) = -1 EBADF (Bad file descriptor) [pid 6385] close(13) = -1 EBADF (Bad file descriptor) [pid 6385] close(14) = -1 EBADF (Bad file descriptor) [pid 6385] close(15) = -1 EBADF (Bad file descriptor) [pid 6385] close(16) = -1 EBADF (Bad file descriptor) [pid 6385] close(17) = -1 EBADF (Bad file descriptor) [ 158.692133][ T6386] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 158.711341][ T6386] BTRFS info (device loop0): balance: ended with status: 0 [pid 6385] close(18) = -1 EBADF (Bad file descriptor) [pid 6385] close(19) = -1 EBADF (Bad file descriptor) [pid 6385] close(20) = -1 EBADF (Bad file descriptor) [pid 6385] close(21) = -1 EBADF (Bad file descriptor) [pid 6385] close(22) = -1 EBADF (Bad file descriptor) [pid 6385] close(23) = -1 EBADF (Bad file descriptor) [pid 6385] close(24) = -1 EBADF (Bad file descriptor) [pid 6385] close(25) = -1 EBADF (Bad file descriptor) [pid 6385] close(26) = -1 EBADF (Bad file descriptor) [pid 6385] close(27) = -1 EBADF (Bad file descriptor) [pid 6385] close(28) = -1 EBADF (Bad file descriptor) [pid 6385] close(29) = -1 EBADF (Bad file descriptor) [pid 6385] exit_group(0 [pid 6404] <... futex resumed>) = ? [pid 6386] <... futex resumed>) = ? [pid 6385] <... exit_group resumed>) = ? [pid 6404] +++ exited with 0 +++ [pid 6386] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=198, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./65/binderfs") = 0 [pid 5073] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./65/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./65") = 0 [pid 5073] mkdir("./66", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6405 attached [pid 6405] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6405] chdir("./66") = 0 [pid 6405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6405] setpgid(0, 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 201 [pid 6405] <... setpgid resumed>) = 0 [pid 6405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6405] write(3, "1000", 4) = 4 [pid 6405] close(3) = 0 [pid 6405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6405] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6405] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6406 attached [pid 6406] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6405] <... clone3 resumed> => {parent_tid=[202]}, 88) = 202 [pid 6406] set_robust_list(0x7f8785c4c9a0, 24 [pid 6405] rt_sigprocmask(SIG_SETMASK, [], [pid 6406] <... set_robust_list resumed>) = 0 [pid 6405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] memfd_create("syzkaller", 0 [pid 6405] <... futex resumed>) = 0 [pid 6405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6406] <... memfd_create resumed>) = 3 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6406] munmap(0x7f877d82c000, 138412032) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6406] close(3) = 0 [pid 6406] mkdir("./file0", 0777) = 0 [ 159.312758][ T6406] loop0: detected capacity change from 0 to 32768 [ 159.325892][ T6406] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6406) [ 159.342487][ T6406] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.351846][ T6406] BTRFS info (device loop0): force clearing of disk cache [ 159.358990][ T6406] BTRFS info (device loop0): setting nodatasum [ 159.365175][ T6406] BTRFS info (device loop0): allowing degraded mounts [ 159.371944][ T6406] BTRFS info (device loop0): enabling disk space caching [ 159.379011][ T6406] BTRFS info (device loop0): disk space caching is enabled [ 159.399634][ T6406] BTRFS info (device loop0): enabling ssd optimizations [ 159.406713][ T6406] BTRFS info (device loop0): auto enabling async discard [ 159.415226][ T6406] BTRFS info (device loop0): rebuilding free space tree [ 159.428237][ T6406] BTRFS info (device loop0): disabling free space tree [ 159.435497][ T6406] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.445704][ T6406] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6406] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6406] chdir("./file0") = 0 [pid 6406] ioctl(4, LOOP_CLR_FD) = 0 [pid 6406] close(4) = 0 [pid 6406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 159.459607][ T6406] BTRFS info (device loop0): checking UUID tree [pid 6406] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6405] <... futex resumed>) = 0 [pid 6405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6405] <... futex resumed>) = 0 [pid 6406] open("./file0", O_RDONLY [pid 6405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6406] <... open resumed>) = 4 [pid 6406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6405] <... futex resumed>) = 0 [pid 6406] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = 0 [pid 6406] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6405] <... futex resumed>) = 1 [pid 6405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = 0 [pid 6406] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6405] <... futex resumed>) = 1 [pid 6405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6405] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6405] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[203]}, 88) = 203 [pid 6405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6405] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6424 attached [pid 6405] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6424] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6424] open("./file0", O_RDONLY) = 5 [pid 6424] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 159.584470][ T6406] BTRFS info (device loop0): balance: start -d -m [ 159.593355][ T6406] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 159.620812][ T6406] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6405] <... futex resumed>) = 0 [pid 6424] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6405] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... futex resumed>) = 0 [pid 6405] <... futex resumed>) = 1 [pid 6405] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6424] <... ioctl resumed>) = 0 [pid 6424] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 159.699995][ T6406] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6424] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6406] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6406] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6405] close(3) = 0 [pid 6405] close(4) = 0 [pid 6405] close(5) = 0 [pid 6405] close(6) = -1 EBADF (Bad file descriptor) [pid 6405] close(7) = -1 EBADF (Bad file descriptor) [pid 6405] close(8) = -1 EBADF (Bad file descriptor) [pid 6405] close(9) = -1 EBADF (Bad file descriptor) [pid 6405] close(10) = -1 EBADF (Bad file descriptor) [pid 6405] close(11) = -1 EBADF (Bad file descriptor) [pid 6405] close(12) = -1 EBADF (Bad file descriptor) [pid 6405] close(13) = -1 EBADF (Bad file descriptor) [pid 6405] close(14) = -1 EBADF (Bad file descriptor) [ 159.763682][ T6406] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 159.783535][ T6406] BTRFS info (device loop0): balance: ended with status: 0 [pid 6405] close(15) = -1 EBADF (Bad file descriptor) [pid 6405] close(16) = -1 EBADF (Bad file descriptor) [pid 6405] close(17) = -1 EBADF (Bad file descriptor) [pid 6405] close(18) = -1 EBADF (Bad file descriptor) [pid 6405] close(19) = -1 EBADF (Bad file descriptor) [pid 6405] close(20) = -1 EBADF (Bad file descriptor) [pid 6405] close(21) = -1 EBADF (Bad file descriptor) [pid 6405] close(22) = -1 EBADF (Bad file descriptor) [pid 6405] close(23) = -1 EBADF (Bad file descriptor) [pid 6405] close(24) = -1 EBADF (Bad file descriptor) [pid 6405] close(25) = -1 EBADF (Bad file descriptor) [pid 6405] close(26) = -1 EBADF (Bad file descriptor) [pid 6405] close(27) = -1 EBADF (Bad file descriptor) [pid 6405] close(28) = -1 EBADF (Bad file descriptor) [pid 6405] close(29) = -1 EBADF (Bad file descriptor) [pid 6405] exit_group(0) = ? [pid 6424] <... futex resumed>) = ? [pid 6406] <... futex resumed>) = ? [pid 6424] +++ exited with 0 +++ [pid 6406] +++ exited with 0 +++ [pid 6405] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=201, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./66/binderfs") = 0 [pid 5073] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./66/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./66") = 0 [pid 5073] mkdir("./67", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6425 attached , child_tidptr=0x5555570a9690) = 204 [pid 6425] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6425] chdir("./67") = 0 [pid 6425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6425] setpgid(0, 0) = 0 [pid 6425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6425] write(3, "1000", 4) = 4 [pid 6425] close(3) = 0 [pid 6425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6425] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6425] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6426 attached [pid 6426] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6425] <... clone3 resumed> => {parent_tid=[205]}, 88) = 205 [pid 6426] <... rseq resumed>) = 0 [pid 6425] rt_sigprocmask(SIG_SETMASK, [], [pid 6426] set_robust_list(0x7f8785c4c9a0, 24 [pid 6425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6426] <... set_robust_list resumed>) = 0 [pid 6425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] rt_sigprocmask(SIG_SETMASK, [], [pid 6425] <... futex resumed>) = 0 [pid 6426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6426] memfd_create("syzkaller", 0) = 3 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6426] munmap(0x7f877d82c000, 138412032) = 0 [pid 6426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6426] close(3) = 0 [pid 6426] mkdir("./file0", 0777) = 0 [ 160.420756][ T6426] loop0: detected capacity change from 0 to 32768 [ 160.435604][ T6426] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6426) [ 160.452373][ T6426] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 160.461667][ T6426] BTRFS info (device loop0): force clearing of disk cache [ 160.468852][ T6426] BTRFS info (device loop0): setting nodatasum [ 160.475054][ T6426] BTRFS info (device loop0): allowing degraded mounts [ 160.481824][ T6426] BTRFS info (device loop0): enabling disk space caching [ 160.488916][ T6426] BTRFS info (device loop0): disk space caching is enabled [ 160.510101][ T6426] BTRFS info (device loop0): enabling ssd optimizations [ 160.517163][ T6426] BTRFS info (device loop0): auto enabling async discard [ 160.525210][ T6426] BTRFS info (device loop0): rebuilding free space tree [ 160.537269][ T6426] BTRFS info (device loop0): disabling free space tree [ 160.544272][ T6426] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.553964][ T6426] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6426] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6426] chdir("./file0") = 0 [pid 6426] ioctl(4, LOOP_CLR_FD) = 0 [pid 6426] close(4) = 0 [pid 6426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6425] <... futex resumed>) = 0 [ 160.567141][ T6426] BTRFS info (device loop0): checking UUID tree [pid 6425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] open("./file0", O_RDONLY [pid 6425] <... futex resumed>) = 0 [pid 6426] <... open resumed>) = 4 [pid 6425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6425] <... futex resumed>) = 0 [pid 6425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6426] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = 0 [pid 6426] <... futex resumed>) = 1 [pid 6425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6425] <... futex resumed>) = 0 [pid 6425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6425] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6425] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[206]}, 88) = 206 [pid 6425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6444 attached [pid 6444] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6425] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... rseq resumed>) = 0 [pid 6444] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6444] open("./file0", O_RDONLY) = 5 [pid 6444] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6425] <... futex resumed>) = 0 [pid 6444] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [ 160.645250][ T6426] BTRFS info (device loop0): balance: start -d -m [ 160.655825][ T6426] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 160.681295][ T6426] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6425] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = 0 [pid 6425] <... futex resumed>) = 1 [pid 6444] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6425] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 160.779498][ T6426] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6444] <... ioctl resumed>) = 0 [pid 6444] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6444] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6426] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6426] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6425] close(3) = 0 [pid 6425] close(4) = 0 [pid 6425] close(5) = 0 [pid 6425] close(6) = -1 EBADF (Bad file descriptor) [pid 6425] close(7) = -1 EBADF (Bad file descriptor) [pid 6425] close(8) = -1 EBADF (Bad file descriptor) [pid 6425] close(9) = -1 EBADF (Bad file descriptor) [pid 6425] close(10) = -1 EBADF (Bad file descriptor) [pid 6425] close(11) = -1 EBADF (Bad file descriptor) [pid 6425] close(12) = -1 EBADF (Bad file descriptor) [pid 6425] close(13) = -1 EBADF (Bad file descriptor) [pid 6425] close(14) = -1 EBADF (Bad file descriptor) [pid 6425] close(15) = -1 EBADF (Bad file descriptor) [pid 6425] close(16) = -1 EBADF (Bad file descriptor) [pid 6425] close(17) = -1 EBADF (Bad file descriptor) [pid 6425] close(18) = -1 EBADF (Bad file descriptor) [ 160.862192][ T6426] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 160.882121][ T6426] BTRFS info (device loop0): balance: ended with status: 0 [pid 6425] close(19) = -1 EBADF (Bad file descriptor) [pid 6425] close(20) = -1 EBADF (Bad file descriptor) [pid 6425] close(21) = -1 EBADF (Bad file descriptor) [pid 6425] close(22) = -1 EBADF (Bad file descriptor) [pid 6425] close(23) = -1 EBADF (Bad file descriptor) [pid 6425] close(24) = -1 EBADF (Bad file descriptor) [pid 6425] close(25) = -1 EBADF (Bad file descriptor) [pid 6425] close(26) = -1 EBADF (Bad file descriptor) [pid 6425] close(27) = -1 EBADF (Bad file descriptor) [pid 6425] close(28) = -1 EBADF (Bad file descriptor) [pid 6425] close(29) = -1 EBADF (Bad file descriptor) [pid 6425] exit_group(0) = ? [pid 6444] <... futex resumed>) = ? [pid 6426] <... futex resumed>) = ? [pid 6444] +++ exited with 0 +++ [pid 6426] +++ exited with 0 +++ [pid 6425] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=204, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./67/binderfs") = 0 [pid 5073] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./67/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./67") = 0 [pid 5073] mkdir("./68", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6445 attached , child_tidptr=0x5555570a9690) = 207 [pid 6445] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6445] chdir("./68") = 0 [pid 6445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6445] setpgid(0, 0) = 0 [pid 6445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6445] write(3, "1000", 4) = 4 [pid 6445] close(3) = 0 [pid 6445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6445] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6445] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6446 attached => {parent_tid=[208]}, 88) = 208 [pid 6446] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6445] rt_sigprocmask(SIG_SETMASK, [], [pid 6446] <... rseq resumed>) = 0 [pid 6445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6446] set_robust_list(0x7f8785c4c9a0, 24 [pid 6445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... set_robust_list resumed>) = 0 [pid 6445] <... futex resumed>) = 0 [pid 6446] rt_sigprocmask(SIG_SETMASK, [], [pid 6445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6446] memfd_create("syzkaller", 0) = 3 [pid 6446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6446] munmap(0x7f877d82c000, 138412032) = 0 [pid 6446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6446] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6446] close(3) = 0 [pid 6446] mkdir("./file0", 0777) = 0 [ 161.483296][ T6446] loop0: detected capacity change from 0 to 32768 [ 161.498901][ T6446] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6446) [ 161.514987][ T6446] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.524459][ T6446] BTRFS info (device loop0): force clearing of disk cache [ 161.531771][ T6446] BTRFS info (device loop0): setting nodatasum [ 161.538295][ T6446] BTRFS info (device loop0): allowing degraded mounts [ 161.545379][ T6446] BTRFS info (device loop0): enabling disk space caching [ 161.552411][ T6446] BTRFS info (device loop0): disk space caching is enabled [ 161.573680][ T6446] BTRFS info (device loop0): enabling ssd optimizations [ 161.580670][ T6446] BTRFS info (device loop0): auto enabling async discard [ 161.589541][ T6446] BTRFS info (device loop0): rebuilding free space tree [ 161.603064][ T6446] BTRFS info (device loop0): disabling free space tree [ 161.610287][ T6446] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.620280][ T6446] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6446] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6446] chdir("./file0") = 0 [pid 6446] ioctl(4, LOOP_CLR_FD) = 0 [pid 6446] close(4) = 0 [pid 6446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 161.633579][ T6446] BTRFS info (device loop0): checking UUID tree [pid 6446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = 0 [pid 6445] <... futex resumed>) = 1 [pid 6445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] open("./file0", O_RDONLY) = 4 [pid 6446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6445] <... futex resumed>) = 0 [pid 6445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6445] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6445] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[209]}, 88) = 209 [pid 6445] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6464 attached NULL, 8) = 0 [pid 6464] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6445] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6445] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6464] open("./file0", O_RDONLY) = 5 [pid 6464] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6464] <... futex resumed>) = 1 [pid 6445] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6445] <... futex resumed>) = 0 [ 161.725305][ T6446] BTRFS info (device loop0): balance: start -d -m [ 161.733342][ T6446] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 161.764320][ T6446] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6445] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6445] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6464] <... ioctl resumed>) = 0 [pid 6464] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6464] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] close(3) = 0 [pid 6446] <... futex resumed>) = 0 [pid 6445] close(4) = 0 [pid 6445] close(5) = 0 [pid 6445] close(6 [pid 6446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6445] close(7) = -1 EBADF (Bad file descriptor) [pid 6445] close(8) = -1 EBADF (Bad file descriptor) [pid 6445] close(9) = -1 EBADF (Bad file descriptor) [pid 6445] close(10) = -1 EBADF (Bad file descriptor) [pid 6445] close(11) = -1 EBADF (Bad file descriptor) [ 161.919157][ T6446] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 161.942777][ T6446] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 161.961938][ T6446] BTRFS info (device loop0): balance: ended with status: 0 [pid 6445] close(12) = -1 EBADF (Bad file descriptor) [pid 6445] close(13) = -1 EBADF (Bad file descriptor) [pid 6445] close(14) = -1 EBADF (Bad file descriptor) [pid 6445] close(15) = -1 EBADF (Bad file descriptor) [pid 6445] close(16) = -1 EBADF (Bad file descriptor) [pid 6445] close(17) = -1 EBADF (Bad file descriptor) [pid 6445] close(18) = -1 EBADF (Bad file descriptor) [pid 6445] close(19) = -1 EBADF (Bad file descriptor) [pid 6445] close(20) = -1 EBADF (Bad file descriptor) [pid 6445] close(21) = -1 EBADF (Bad file descriptor) [pid 6445] close(22) = -1 EBADF (Bad file descriptor) [pid 6445] close(23) = -1 EBADF (Bad file descriptor) [pid 6445] close(24) = -1 EBADF (Bad file descriptor) [pid 6445] close(25) = -1 EBADF (Bad file descriptor) [pid 6445] close(26) = -1 EBADF (Bad file descriptor) [pid 6445] close(27) = -1 EBADF (Bad file descriptor) [pid 6445] close(28) = -1 EBADF (Bad file descriptor) [pid 6445] close(29) = -1 EBADF (Bad file descriptor) [pid 6445] exit_group(0 [pid 6464] <... futex resumed>) = ? [pid 6464] +++ exited with 0 +++ [pid 6446] <... futex resumed>) = ? [pid 6445] <... exit_group resumed>) = ? [pid 6446] +++ exited with 0 +++ [pid 6445] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=207, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./68/binderfs") = 0 [pid 5073] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./68/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./68") = 0 [pid 5073] mkdir("./69", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6465 attached [pid 6465] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 210 [pid 6465] <... set_robust_list resumed>) = 0 [pid 6465] chdir("./69") = 0 [pid 6465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6465] setpgid(0, 0) = 0 [pid 6465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6465] write(3, "1000", 4) = 4 [pid 6465] close(3) = 0 [pid 6465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6465] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6465] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6466 attached [pid 6466] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6465] <... clone3 resumed> => {parent_tid=[211]}, 88) = 211 [pid 6466] <... rseq resumed>) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], [pid 6466] set_robust_list(0x7f8785c4c9a0, 24 [pid 6465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] <... set_robust_list resumed>) = 0 [pid 6465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] rt_sigprocmask(SIG_SETMASK, [], [pid 6465] <... futex resumed>) = 0 [pid 6466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6466] memfd_create("syzkaller", 0) = 3 [pid 6466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6466] munmap(0x7f877d82c000, 138412032) = 0 [pid 6466] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6466] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6466] close(3) = 0 [pid 6466] mkdir("./file0", 0777) = 0 [ 162.625165][ T6466] loop0: detected capacity change from 0 to 32768 [ 162.642052][ T6466] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6466) [ 162.658137][ T6466] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 162.667592][ T6466] BTRFS info (device loop0): force clearing of disk cache [ 162.674764][ T6466] BTRFS info (device loop0): setting nodatasum [ 162.680933][ T6466] BTRFS info (device loop0): allowing degraded mounts [ 162.687742][ T6466] BTRFS info (device loop0): enabling disk space caching [ 162.694786][ T6466] BTRFS info (device loop0): disk space caching is enabled [ 162.716920][ T6466] BTRFS info (device loop0): enabling ssd optimizations [ 162.723912][ T6466] BTRFS info (device loop0): auto enabling async discard [ 162.731719][ T6466] BTRFS info (device loop0): rebuilding free space tree [ 162.744289][ T6466] BTRFS info (device loop0): disabling free space tree [ 162.751179][ T6466] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.760851][ T6466] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6466] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6466] chdir("./file0") = 0 [pid 6466] ioctl(4, LOOP_CLR_FD) = 0 [pid 6466] close(4) = 0 [pid 6466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6466] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6465] <... futex resumed>) = 0 [pid 6465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] <... futex resumed>) = 0 [pid 6465] <... futex resumed>) = 1 [pid 6466] open("./file0", O_RDONLY [pid 6465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6466] <... open resumed>) = 4 [pid 6466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = 0 [pid 6466] <... futex resumed>) = 1 [pid 6465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6465] <... futex resumed>) = 0 [pid 6466] <... ioctl resumed>) = 0 [ 162.774321][ T6466] BTRFS info (device loop0): checking UUID tree [pid 6465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = 0 [pid 6466] <... futex resumed>) = 1 [pid 6465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6465] <... futex resumed>) = 0 [pid 6465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6465] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6465] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6484 attached => {parent_tid=[212]}, 88) = 212 [pid 6484] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6465] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6484] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6484] open("./file0", O_RDONLY) = 5 [pid 6484] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6465] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 162.822691][ T6466] BTRFS info (device loop0): balance: start -d -m [ 162.833576][ T6466] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 162.859065][ T6466] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6484] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 162.972656][ T6466] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6484] <... ioctl resumed>) = 0 [pid 6484] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6484] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6466] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6466] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6465] close(3) = 0 [pid 6465] close(4) = 0 [pid 6465] close(5) = 0 [pid 6465] close(6) = -1 EBADF (Bad file descriptor) [pid 6465] close(7) = -1 EBADF (Bad file descriptor) [pid 6465] close(8) = -1 EBADF (Bad file descriptor) [pid 6465] close(9) = -1 EBADF (Bad file descriptor) [pid 6465] close(10) = -1 EBADF (Bad file descriptor) [pid 6465] close(11) = -1 EBADF (Bad file descriptor) [ 163.054406][ T6466] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 163.074234][ T6466] BTRFS info (device loop0): balance: ended with status: 0 [pid 6465] close(12) = -1 EBADF (Bad file descriptor) [pid 6465] close(13) = -1 EBADF (Bad file descriptor) [pid 6465] close(14) = -1 EBADF (Bad file descriptor) [pid 6465] close(15) = -1 EBADF (Bad file descriptor) [pid 6465] close(16) = -1 EBADF (Bad file descriptor) [pid 6465] close(17) = -1 EBADF (Bad file descriptor) [pid 6465] close(18) = -1 EBADF (Bad file descriptor) [pid 6465] close(19) = -1 EBADF (Bad file descriptor) [pid 6465] close(20) = -1 EBADF (Bad file descriptor) [pid 6465] close(21) = -1 EBADF (Bad file descriptor) [pid 6465] close(22) = -1 EBADF (Bad file descriptor) [pid 6465] close(23) = -1 EBADF (Bad file descriptor) [pid 6465] close(24) = -1 EBADF (Bad file descriptor) [pid 6465] close(25) = -1 EBADF (Bad file descriptor) [pid 6465] close(26) = -1 EBADF (Bad file descriptor) [pid 6465] close(27) = -1 EBADF (Bad file descriptor) [pid 6465] close(28) = -1 EBADF (Bad file descriptor) [pid 6465] close(29) = -1 EBADF (Bad file descriptor) [pid 6465] exit_group(0 [pid 6484] <... futex resumed>) = ? [pid 6484] +++ exited with 0 +++ [pid 6466] <... futex resumed>) = ? [pid 6465] <... exit_group resumed>) = ? [pid 6466] +++ exited with 0 +++ [pid 6465] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=210, si_uid=0, si_status=0, si_utime=0, si_stime=45 /* 0.45 s */} --- [pid 5073] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./69/binderfs") = 0 [pid 5073] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./69/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./69") = 0 [pid 5073] mkdir("./70", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6485 attached , child_tidptr=0x5555570a9690) = 213 [pid 6485] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6485] chdir("./70") = 0 [pid 6485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6485] setpgid(0, 0) = 0 [pid 6485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6485] write(3, "1000", 4) = 4 [pid 6485] close(3) = 0 [pid 6485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6485] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6485] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6486 attached [pid 6486] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6485] <... clone3 resumed> => {parent_tid=[214]}, 88) = 214 [pid 6486] <... rseq resumed>) = 0 [pid 6486] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6485] rt_sigprocmask(SIG_SETMASK, [], [pid 6486] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... futex resumed>) = 0 [pid 6485] <... futex resumed>) = 1 [pid 6485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6486] memfd_create("syzkaller", 0) = 3 [pid 6486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6486] munmap(0x7f877d82c000, 138412032) = 0 [pid 6486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6486] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6486] close(3) = 0 [pid 6486] mkdir("./file0", 0777) = 0 [ 163.590659][ T6486] loop0: detected capacity change from 0 to 32768 [ 163.610156][ T6486] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6486) [ 163.626891][ T6486] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.636201][ T6486] BTRFS info (device loop0): force clearing of disk cache [ 163.643298][ T6486] BTRFS info (device loop0): setting nodatasum [ 163.649503][ T6486] BTRFS info (device loop0): allowing degraded mounts [ 163.656316][ T6486] BTRFS info (device loop0): enabling disk space caching [ 163.663331][ T6486] BTRFS info (device loop0): disk space caching is enabled [ 163.684697][ T6486] BTRFS info (device loop0): enabling ssd optimizations [ 163.691648][ T6486] BTRFS info (device loop0): auto enabling async discard [ 163.699934][ T6486] BTRFS info (device loop0): rebuilding free space tree [ 163.711462][ T6486] BTRFS info (device loop0): disabling free space tree [ 163.718479][ T6486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.728575][ T6486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6486] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6486] chdir("./file0") = 0 [pid 6486] ioctl(4, LOOP_CLR_FD) = 0 [pid 6486] close(4) = 0 [pid 6486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... futex resumed>) = 0 [pid 6485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 6486] open("./file0", O_RDONLY [pid 6485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6486] <... open resumed>) = 4 [ 163.742206][ T6486] BTRFS info (device loop0): checking UUID tree [pid 6486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... futex resumed>) = 0 [pid 6485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... futex resumed>) = 1 [pid 6485] <... futex resumed>) = 0 [pid 6486] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... futex resumed>) = 0 [pid 6485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... futex resumed>) = 1 [pid 6486] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6485] <... futex resumed>) = 0 [pid 6485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6485] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6485] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[215]}, 88) = 215 [pid 6485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6485] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6504 attached [pid 6504] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6504] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6504] open("./file0", O_RDONLY) = 5 [pid 6504] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6485] <... futex resumed>) = 0 [pid 6504] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6485] <... futex resumed>) = 0 [ 163.817218][ T6486] BTRFS info (device loop0): balance: start -d -m [ 163.826177][ T6486] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 163.851328][ T6486] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6504] <... ioctl resumed>) = 0 [pid 6504] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 164.027295][ T6486] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 164.051655][ T6486] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6504] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6486] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6486] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] close(3) = 0 [pid 6485] close(4) = 0 [pid 6485] close(5) = 0 [ 164.071374][ T6486] BTRFS info (device loop0): balance: ended with status: 0 [pid 6485] close(6) = -1 EBADF (Bad file descriptor) [pid 6485] close(7) = -1 EBADF (Bad file descriptor) [pid 6485] close(8) = -1 EBADF (Bad file descriptor) [pid 6485] close(9) = -1 EBADF (Bad file descriptor) [pid 6485] close(10) = -1 EBADF (Bad file descriptor) [pid 6485] close(11) = -1 EBADF (Bad file descriptor) [pid 6485] close(12) = -1 EBADF (Bad file descriptor) [pid 6485] close(13) = -1 EBADF (Bad file descriptor) [pid 6485] close(14) = -1 EBADF (Bad file descriptor) [pid 6485] close(15) = -1 EBADF (Bad file descriptor) [pid 6485] close(16) = -1 EBADF (Bad file descriptor) [pid 6485] close(17) = -1 EBADF (Bad file descriptor) [pid 6485] close(18) = -1 EBADF (Bad file descriptor) [pid 6485] close(19) = -1 EBADF (Bad file descriptor) [pid 6485] close(20) = -1 EBADF (Bad file descriptor) [pid 6485] close(21) = -1 EBADF (Bad file descriptor) [pid 6485] close(22) = -1 EBADF (Bad file descriptor) [pid 6485] close(23) = -1 EBADF (Bad file descriptor) [pid 6485] close(24) = -1 EBADF (Bad file descriptor) [pid 6485] close(25) = -1 EBADF (Bad file descriptor) [pid 6485] close(26) = -1 EBADF (Bad file descriptor) [pid 6485] close(27) = -1 EBADF (Bad file descriptor) [pid 6485] close(28) = -1 EBADF (Bad file descriptor) [pid 6485] close(29) = -1 EBADF (Bad file descriptor) [pid 6485] exit_group(0 [pid 6504] <... futex resumed>) = ? [pid 6504] +++ exited with 0 +++ [pid 6486] <... futex resumed>) = ? [pid 6485] <... exit_group resumed>) = ? [pid 6486] +++ exited with 0 +++ [pid 6485] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=213, si_uid=0, si_status=0, si_utime=0, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./70/binderfs") = 0 [pid 5073] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./70/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./70") = 0 [pid 5073] mkdir("./71", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6505 attached [pid 6505] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 216 [pid 6505] chdir("./71") = 0 [pid 6505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6505] setpgid(0, 0) = 0 [pid 6505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6505] write(3, "1000", 4) = 4 [pid 6505] close(3) = 0 [pid 6505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6505] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6505] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6506 attached [pid 6506] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6505] <... clone3 resumed> => {parent_tid=[217]}, 88) = 217 [pid 6506] set_robust_list(0x7f8785c4c9a0, 24 [pid 6505] rt_sigprocmask(SIG_SETMASK, [], [pid 6506] <... set_robust_list resumed>) = 0 [pid 6505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6506] rt_sigprocmask(SIG_SETMASK, [], [pid 6505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6505] <... futex resumed>) = 0 [pid 6506] memfd_create("syzkaller", 0 [pid 6505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6506] <... memfd_create resumed>) = 3 [pid 6506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6506] munmap(0x7f877d82c000, 138412032) = 0 [pid 6506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6506] close(3) = 0 [pid 6506] mkdir("./file0", 0777) = 0 [ 164.734651][ T6506] loop0: detected capacity change from 0 to 32768 [ 164.754181][ T6506] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6506) [ 164.771268][ T6506] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 164.780540][ T6506] BTRFS info (device loop0): force clearing of disk cache [ 164.787690][ T6506] BTRFS info (device loop0): setting nodatasum [ 164.793842][ T6506] BTRFS info (device loop0): allowing degraded mounts [ 164.800715][ T6506] BTRFS info (device loop0): enabling disk space caching [ 164.808066][ T6506] BTRFS info (device loop0): disk space caching is enabled [ 164.829889][ T6506] BTRFS info (device loop0): enabling ssd optimizations [ 164.836888][ T6506] BTRFS info (device loop0): auto enabling async discard [ 164.845340][ T6506] BTRFS info (device loop0): rebuilding free space tree [ 164.858669][ T6506] BTRFS info (device loop0): disabling free space tree [ 164.865793][ T6506] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6506] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6506] chdir("./file0") = 0 [pid 6506] ioctl(4, LOOP_CLR_FD) = 0 [pid 6506] close(4) = 0 [pid 6506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] open("./file0", O_RDONLY [ 164.875525][ T6506] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.888679][ T6506] BTRFS info (device loop0): checking UUID tree [pid 6505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... open resumed>) = 4 [pid 6506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6505] <... futex resumed>) = 0 [pid 6505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = 0 [pid 6506] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6505] <... futex resumed>) = 1 [pid 6505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6506] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6505] <... futex resumed>) = 0 [pid 6505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6505] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6505] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[218]}, 88) = 218 [pid 6505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6505] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6524 attached [pid 6524] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6524] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6524] open("./file0", O_RDONLY) = 5 [pid 6524] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6524] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6505] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6505] <... futex resumed>) = 0 [pid 6524] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 164.977853][ T6506] BTRFS info (device loop0): balance: start -d -m [ 164.986473][ T6506] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 165.017502][ T6506] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6524] <... ioctl resumed>) = 0 [pid 6524] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 165.152468][ T6506] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 165.176801][ T6506] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6524] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6506] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6505] close(3) = 0 [pid 6505] close(4) = 0 [pid 6505] close(5) = 0 [pid 6505] close(6) = -1 EBADF (Bad file descriptor) [pid 6505] close(7) = -1 EBADF (Bad file descriptor) [ 165.196382][ T6506] BTRFS info (device loop0): balance: ended with status: 0 [pid 6505] close(8) = -1 EBADF (Bad file descriptor) [pid 6505] close(9) = -1 EBADF (Bad file descriptor) [pid 6505] close(10) = -1 EBADF (Bad file descriptor) [pid 6505] close(11) = -1 EBADF (Bad file descriptor) [pid 6505] close(12) = -1 EBADF (Bad file descriptor) [pid 6505] close(13) = -1 EBADF (Bad file descriptor) [pid 6505] close(14) = -1 EBADF (Bad file descriptor) [pid 6505] close(15) = -1 EBADF (Bad file descriptor) [pid 6505] close(16) = -1 EBADF (Bad file descriptor) [pid 6505] close(17) = -1 EBADF (Bad file descriptor) [pid 6505] close(18) = -1 EBADF (Bad file descriptor) [pid 6505] close(19) = -1 EBADF (Bad file descriptor) [pid 6505] close(20) = -1 EBADF (Bad file descriptor) [pid 6505] close(21) = -1 EBADF (Bad file descriptor) [pid 6505] close(22) = -1 EBADF (Bad file descriptor) [pid 6505] close(23) = -1 EBADF (Bad file descriptor) [pid 6505] close(24) = -1 EBADF (Bad file descriptor) [pid 6505] close(25) = -1 EBADF (Bad file descriptor) [pid 6505] close(26) = -1 EBADF (Bad file descriptor) [pid 6505] close(27) = -1 EBADF (Bad file descriptor) [pid 6505] close(28) = -1 EBADF (Bad file descriptor) [pid 6505] close(29) = -1 EBADF (Bad file descriptor) [pid 6505] exit_group(0 [pid 6524] <... futex resumed>) = ? [pid 6506] <... futex resumed>) = ? [pid 6505] <... exit_group resumed>) = ? [pid 6524] +++ exited with 0 +++ [pid 6506] +++ exited with 0 +++ [pid 6505] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=216, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./71/binderfs") = 0 [pid 5073] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./71/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./71") = 0 [pid 5073] mkdir("./72", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6525 attached , child_tidptr=0x5555570a9690) = 219 [pid 6525] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6525] chdir("./72") = 0 [pid 6525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6525] setpgid(0, 0) = 0 [pid 6525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6525] write(3, "1000", 4) = 4 [pid 6525] close(3) = 0 [pid 6525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6525] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6525] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6526 attached [pid 6526] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6526] set_robust_list(0x7f8785c4c9a0, 24 [pid 6525] <... clone3 resumed> => {parent_tid=[220]}, 88) = 220 [pid 6526] <... set_robust_list resumed>) = 0 [pid 6526] rt_sigprocmask(SIG_SETMASK, [], [pid 6525] rt_sigprocmask(SIG_SETMASK, [], [pid 6526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6525] <... futex resumed>) = 0 [pid 6526] memfd_create("syzkaller", 0 [pid 6525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6526] <... memfd_create resumed>) = 3 [pid 6526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6526] munmap(0x7f877d82c000, 138412032) = 0 [pid 6526] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6526] close(3) = 0 [pid 6526] mkdir("./file0", 0777) = 0 [ 165.868281][ T6526] loop0: detected capacity change from 0 to 32768 [ 165.881913][ T6526] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6526) [ 165.898524][ T6526] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 165.907830][ T6526] BTRFS info (device loop0): force clearing of disk cache [ 165.914968][ T6526] BTRFS info (device loop0): setting nodatasum [ 165.921115][ T6526] BTRFS info (device loop0): allowing degraded mounts [ 165.927903][ T6526] BTRFS info (device loop0): enabling disk space caching [ 165.934949][ T6526] BTRFS info (device loop0): disk space caching is enabled [ 165.956755][ T6526] BTRFS info (device loop0): enabling ssd optimizations [ 165.963949][ T6526] BTRFS info (device loop0): auto enabling async discard [ 165.971813][ T6526] BTRFS info (device loop0): rebuilding free space tree [ 165.983808][ T6526] BTRFS info (device loop0): disabling free space tree [ 165.990752][ T6526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.000417][ T6526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6526] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6526] chdir("./file0") = 0 [pid 6526] ioctl(4, LOOP_CLR_FD) = 0 [pid 6526] close(4) = 0 [pid 6526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6525] <... futex resumed>) = 0 [pid 6526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6525] <... futex resumed>) = 0 [pid 6526] open("./file0", O_RDONLY) = 4 [ 166.013483][ T6526] BTRFS info (device loop0): checking UUID tree [pid 6525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] <... futex resumed>) = 0 [pid 6525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = 0 [pid 6525] <... futex resumed>) = 1 [pid 6526] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] <... ioctl resumed>) = 0 [pid 6526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6525] <... futex resumed>) = 0 [pid 6526] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 166.079442][ T6526] BTRFS info (device loop0): balance: start -d -m [ 166.090441][ T6526] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6525] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6525] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[221]}, 88) = 221 [pid 6525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6525] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6544 attached [pid 6544] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6544] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6544] open("./file0", O_RDONLY) = 5 [pid 6544] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6544] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] <... futex resumed>) = 0 [pid 6544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6525] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6525] <... futex resumed>) = 0 [ 166.120508][ T6526] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6525] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6544] <... ioctl resumed>) = 0 [pid 6544] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 166.280241][ T6526] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 166.310043][ T6526] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6544] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6526] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] close(3) = 0 [pid 6525] close(4) = 0 [pid 6525] close(5) = 0 [pid 6525] close(6) = -1 EBADF (Bad file descriptor) [pid 6525] close(7) = -1 EBADF (Bad file descriptor) [pid 6525] close(8) = -1 EBADF (Bad file descriptor) [pid 6525] close(9) = -1 EBADF (Bad file descriptor) [pid 6525] close(10) = -1 EBADF (Bad file descriptor) [pid 6525] close(11) = -1 EBADF (Bad file descriptor) [pid 6525] close(12) = -1 EBADF (Bad file descriptor) [pid 6525] close(13) = -1 EBADF (Bad file descriptor) [pid 6525] close(14) = -1 EBADF (Bad file descriptor) [pid 6525] close(15) = -1 EBADF (Bad file descriptor) [pid 6525] close(16) = -1 EBADF (Bad file descriptor) [pid 6525] close(17) = -1 EBADF (Bad file descriptor) [pid 6525] close(18) = -1 EBADF (Bad file descriptor) [pid 6525] close(19) = -1 EBADF (Bad file descriptor) [pid 6525] close(20) = -1 EBADF (Bad file descriptor) [pid 6525] close(21) = -1 EBADF (Bad file descriptor) [pid 6525] close(22) = -1 EBADF (Bad file descriptor) [pid 6525] close(23) = -1 EBADF (Bad file descriptor) [pid 6525] close(24) = -1 EBADF (Bad file descriptor) [pid 6525] close(25) = -1 EBADF (Bad file descriptor) [ 166.332258][ T6526] BTRFS info (device loop0): balance: ended with status: 0 [pid 6525] close(26) = -1 EBADF (Bad file descriptor) [pid 6525] close(27) = -1 EBADF (Bad file descriptor) [pid 6525] close(28) = -1 EBADF (Bad file descriptor) [pid 6525] close(29) = -1 EBADF (Bad file descriptor) [pid 6525] exit_group(0 [pid 6544] <... futex resumed>) = ? [pid 6544] +++ exited with 0 +++ [pid 6526] <... futex resumed>) = ? [pid 6525] <... exit_group resumed>) = ? [pid 6526] +++ exited with 0 +++ [pid 6525] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=219, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./72/binderfs") = 0 [pid 5073] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./72/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./72") = 0 [pid 5073] mkdir("./73", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6545 attached , child_tidptr=0x5555570a9690) = 222 [pid 6545] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6545] chdir("./73") = 0 [pid 6545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6545] setpgid(0, 0) = 0 [pid 6545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6545] write(3, "1000", 4) = 4 [pid 6545] close(3) = 0 [pid 6545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6545] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6545] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6546 attached [pid 6546] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6545] <... clone3 resumed> => {parent_tid=[223]}, 88) = 223 [pid 6546] <... rseq resumed>) = 0 [pid 6545] rt_sigprocmask(SIG_SETMASK, [], [pid 6546] set_robust_list(0x7f8785c4c9a0, 24 [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6546] <... set_robust_list resumed>) = 0 [pid 6545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6545] <... futex resumed>) = 0 [pid 6546] memfd_create("syzkaller", 0 [pid 6545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6546] <... memfd_create resumed>) = 3 [pid 6546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6546] munmap(0x7f877d82c000, 138412032) = 0 [pid 6546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6546] close(3) = 0 [pid 6546] mkdir("./file0", 0777) = 0 [ 166.859773][ T6546] loop0: detected capacity change from 0 to 32768 [ 166.875849][ T6546] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6546) [ 166.891376][ T6546] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 166.900668][ T6546] BTRFS info (device loop0): force clearing of disk cache [ 166.907802][ T6546] BTRFS info (device loop0): setting nodatasum [ 166.914005][ T6546] BTRFS info (device loop0): allowing degraded mounts [ 166.920774][ T6546] BTRFS info (device loop0): enabling disk space caching [ 166.927878][ T6546] BTRFS info (device loop0): disk space caching is enabled [ 166.949085][ T6546] BTRFS info (device loop0): enabling ssd optimizations [ 166.956048][ T6546] BTRFS info (device loop0): auto enabling async discard [ 166.963743][ T6546] BTRFS info (device loop0): rebuilding free space tree [ 166.975683][ T6546] BTRFS info (device loop0): disabling free space tree [ 166.982568][ T6546] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.992523][ T6546] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6546] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6546] chdir("./file0") = 0 [pid 6546] ioctl(4, LOOP_CLR_FD) = 0 [pid 6546] close(4) = 0 [pid 6546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... futex resumed>) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] open("./file0", O_RDONLY) = 4 [ 167.006278][ T6546] BTRFS info (device loop0): checking UUID tree [pid 6546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... futex resumed>) = 0 [pid 6546] <... futex resumed>) = 1 [pid 6545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6546] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6545] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6545] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[224]}, 88) = 224 ./strace-static-x86_64: Process 6564 attached [pid 6564] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6545] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] <... rseq resumed>) = 0 [pid 6564] set_robust_list(0x7f8785c2b9a0, 24 [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6564] <... set_robust_list resumed>) = 0 [pid 6545] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6545] <... futex resumed>) = 0 [pid 6564] open("./file0", O_RDONLY [pid 6545] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6564] <... open resumed>) = 5 [pid 6564] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6545] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... futex resumed>) = 0 [pid 6545] <... futex resumed>) = 1 [pid 6564] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 167.068845][ T6546] BTRFS info (device loop0): balance: start -d -m [ 167.078798][ T6546] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 167.102906][ T6546] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6545] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6564] <... ioctl resumed>) = 0 [pid 6564] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 167.272380][ T6546] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 167.296488][ T6546] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6564] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6546] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] close(3 [pid 6546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] <... close resumed>) = 0 [pid 6545] close(4) = 0 [pid 6545] close(5) = 0 [pid 6545] close(6) = -1 EBADF (Bad file descriptor) [pid 6545] close(7) = -1 EBADF (Bad file descriptor) [pid 6545] close(8) = -1 EBADF (Bad file descriptor) [pid 6545] close(9) = -1 EBADF (Bad file descriptor) [ 167.315957][ T6546] BTRFS info (device loop0): balance: ended with status: 0 [pid 6545] close(10) = -1 EBADF (Bad file descriptor) [pid 6545] close(11) = -1 EBADF (Bad file descriptor) [pid 6545] close(12) = -1 EBADF (Bad file descriptor) [pid 6545] close(13) = -1 EBADF (Bad file descriptor) [pid 6545] close(14) = -1 EBADF (Bad file descriptor) [pid 6545] close(15) = -1 EBADF (Bad file descriptor) [pid 6545] close(16) = -1 EBADF (Bad file descriptor) [pid 6545] close(17) = -1 EBADF (Bad file descriptor) [pid 6545] close(18) = -1 EBADF (Bad file descriptor) [pid 6545] close(19) = -1 EBADF (Bad file descriptor) [pid 6545] close(20) = -1 EBADF (Bad file descriptor) [pid 6545] close(21) = -1 EBADF (Bad file descriptor) [pid 6545] close(22) = -1 EBADF (Bad file descriptor) [pid 6545] close(23) = -1 EBADF (Bad file descriptor) [pid 6545] close(24) = -1 EBADF (Bad file descriptor) [pid 6545] close(25) = -1 EBADF (Bad file descriptor) [pid 6545] close(26) = -1 EBADF (Bad file descriptor) [pid 6545] close(27) = -1 EBADF (Bad file descriptor) [pid 6545] close(28) = -1 EBADF (Bad file descriptor) [pid 6545] close(29) = -1 EBADF (Bad file descriptor) [pid 6545] exit_group(0 [pid 6564] <... futex resumed>) = ? [pid 6546] <... futex resumed>) = ? [pid 6545] <... exit_group resumed>) = ? [pid 6564] +++ exited with 0 +++ [pid 6546] +++ exited with 0 +++ [pid 6545] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=222, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./73/binderfs") = 0 [pid 5073] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./73/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./73") = 0 [pid 5073] mkdir("./74", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6565 attached , child_tidptr=0x5555570a9690) = 225 [pid 6565] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6565] chdir("./74") = 0 [pid 6565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6565] setpgid(0, 0) = 0 [pid 6565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6565] write(3, "1000", 4) = 4 [pid 6565] close(3) = 0 [pid 6565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6565] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6565] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6566 attached [pid 6566] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6566] set_robust_list(0x7f8785c4c9a0, 24 [pid 6565] <... clone3 resumed> => {parent_tid=[226]}, 88) = 226 [pid 6566] <... set_robust_list resumed>) = 0 [pid 6565] rt_sigprocmask(SIG_SETMASK, [], [pid 6566] rt_sigprocmask(SIG_SETMASK, [], [pid 6565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] memfd_create("syzkaller", 0 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6566] <... memfd_create resumed>) = 3 [pid 6566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6566] munmap(0x7f877d82c000, 138412032) = 0 [pid 6566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6566] close(3) = 0 [pid 6566] mkdir("./file0", 0777) = 0 [ 167.895466][ T6566] loop0: detected capacity change from 0 to 32768 [ 167.910086][ T6566] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6566) [ 167.925970][ T6566] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 167.935251][ T6566] BTRFS info (device loop0): force clearing of disk cache [ 167.942347][ T6566] BTRFS info (device loop0): setting nodatasum [ 167.948550][ T6566] BTRFS info (device loop0): allowing degraded mounts [ 167.955351][ T6566] BTRFS info (device loop0): enabling disk space caching [ 167.962359][ T6566] BTRFS info (device loop0): disk space caching is enabled [ 167.985455][ T6566] BTRFS info (device loop0): enabling ssd optimizations [ 167.992412][ T6566] BTRFS info (device loop0): auto enabling async discard [ 168.000771][ T6566] BTRFS info (device loop0): rebuilding free space tree [ 168.012427][ T6566] BTRFS info (device loop0): disabling free space tree [ 168.019620][ T6566] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.029305][ T6566] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6566] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6566] chdir("./file0") = 0 [pid 6566] ioctl(4, LOOP_CLR_FD) = 0 [pid 6566] close(4) = 0 [pid 6566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... futex resumed>) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6566] open("./file0", O_RDONLY [pid 6565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... open resumed>) = 4 [pid 6566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6565] <... futex resumed>) = 0 [ 168.042529][ T6566] BTRFS info (device loop0): checking UUID tree [pid 6566] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6565] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6565] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[227]}, 88) = 227 [pid 6565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6565] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6584 attached [pid 6584] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6584] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6584] open("./file0", O_RDONLY) = 5 [pid 6584] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6565] <... futex resumed>) = 0 [pid 6584] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] <... futex resumed>) = 0 [pid 6565] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 168.096111][ T6566] BTRFS info (device loop0): balance: start -d -m [ 168.105730][ T6566] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 168.135031][ T6566] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6584] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6584] <... ioctl resumed>) = 0 [pid 6584] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 168.300472][ T6566] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 168.324697][ T6566] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6584] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6565] close(3) = 0 [pid 6565] close(4) = 0 [pid 6565] close(5) = 0 [pid 6565] close(6) = -1 EBADF (Bad file descriptor) [ 168.344728][ T6566] BTRFS info (device loop0): balance: ended with status: 0 [pid 6565] close(7) = -1 EBADF (Bad file descriptor) [pid 6565] close(8) = -1 EBADF (Bad file descriptor) [pid 6565] close(9) = -1 EBADF (Bad file descriptor) [pid 6565] close(10) = -1 EBADF (Bad file descriptor) [pid 6565] close(11) = -1 EBADF (Bad file descriptor) [pid 6565] close(12) = -1 EBADF (Bad file descriptor) [pid 6565] close(13) = -1 EBADF (Bad file descriptor) [pid 6565] close(14) = -1 EBADF (Bad file descriptor) [pid 6565] close(15) = -1 EBADF (Bad file descriptor) [pid 6565] close(16) = -1 EBADF (Bad file descriptor) [pid 6565] close(17) = -1 EBADF (Bad file descriptor) [pid 6565] close(18) = -1 EBADF (Bad file descriptor) [pid 6565] close(19) = -1 EBADF (Bad file descriptor) [pid 6565] close(20) = -1 EBADF (Bad file descriptor) [pid 6565] close(21) = -1 EBADF (Bad file descriptor) [pid 6565] close(22) = -1 EBADF (Bad file descriptor) [pid 6565] close(23) = -1 EBADF (Bad file descriptor) [pid 6565] close(24) = -1 EBADF (Bad file descriptor) [pid 6565] close(25) = -1 EBADF (Bad file descriptor) [pid 6565] close(26) = -1 EBADF (Bad file descriptor) [pid 6565] close(27) = -1 EBADF (Bad file descriptor) [pid 6565] close(28) = -1 EBADF (Bad file descriptor) [pid 6565] close(29) = -1 EBADF (Bad file descriptor) [pid 6565] exit_group(0 [pid 6584] <... futex resumed>) = ? [pid 6584] +++ exited with 0 +++ [pid 6566] <... futex resumed>) = ? [pid 6565] <... exit_group resumed>) = ? [pid 6566] +++ exited with 0 +++ [pid 6565] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=225, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=46 /* 0.46 s */} --- [pid 5073] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./74/binderfs") = 0 [pid 5073] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./74/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./74") = 0 [pid 5073] mkdir("./75", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6585 attached , child_tidptr=0x5555570a9690) = 228 [pid 6585] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6585] chdir("./75") = 0 [pid 6585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6585] setpgid(0, 0) = 0 [pid 6585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6585] write(3, "1000", 4) = 4 [pid 6585] close(3) = 0 [pid 6585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6585] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6585] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6586 attached [pid 6586] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6585] <... clone3 resumed> => {parent_tid=[229]}, 88) = 229 [pid 6586] set_robust_list(0x7f8785c4c9a0, 24 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], [pid 6586] <... set_robust_list resumed>) = 0 [pid 6585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] memfd_create("syzkaller", 0 [pid 6585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6586] <... memfd_create resumed>) = 3 [pid 6586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6586] munmap(0x7f877d82c000, 138412032) = 0 [pid 6586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6586] close(3) = 0 [pid 6586] mkdir("./file0", 0777) = 0 [ 168.989302][ T6586] loop0: detected capacity change from 0 to 32768 [ 169.013199][ T6586] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6586) [ 169.028312][ T6586] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 169.037764][ T6586] BTRFS info (device loop0): force clearing of disk cache [ 169.044975][ T6586] BTRFS info (device loop0): setting nodatasum [ 169.051145][ T6586] BTRFS info (device loop0): allowing degraded mounts [ 169.057955][ T6586] BTRFS info (device loop0): enabling disk space caching [ 169.065922][ T6586] BTRFS info (device loop0): disk space caching is enabled [ 169.087722][ T6586] BTRFS info (device loop0): enabling ssd optimizations [ 169.094725][ T6586] BTRFS info (device loop0): auto enabling async discard [ 169.102653][ T6586] BTRFS info (device loop0): rebuilding free space tree [ 169.116460][ T6586] BTRFS info (device loop0): disabling free space tree [ 169.123565][ T6586] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6586] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6586] chdir("./file0") = 0 [pid 6586] ioctl(4, LOOP_CLR_FD) = 0 [pid 6586] close(4) = 0 [pid 6586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] <... futex resumed>) = 0 [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] open("./file0", O_RDONLY) = 4 [pid 6585] <... futex resumed>) = 0 [pid 6585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 169.133637][ T6586] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.147202][ T6586] BTRFS info (device loop0): checking UUID tree [pid 6586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6585] <... futex resumed>) = 0 [pid 6585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6585] <... futex resumed>) = 0 [pid 6585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6585] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6585] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6604 attached [pid 6604] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6585] <... clone3 resumed> => {parent_tid=[230]}, 88) = 230 [pid 6604] <... rseq resumed>) = 0 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6585] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6585] <... futex resumed>) = 0 [ 169.228129][ T6586] BTRFS info (device loop0): balance: start -d -m [ 169.238063][ T6586] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 169.261492][ T6586] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6604] rt_sigprocmask(SIG_SETMASK, [], [pid 6585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6604] open("./file0", O_RDONLY) = 5 [pid 6604] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6604] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6585] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 169.314278][ T6586] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6604] <... ioctl resumed>) = 0 [pid 6604] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6586] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] close(3) = 0 [pid 6585] close(4) = 0 [pid 6585] close(5) = 0 [pid 6585] close(6) = -1 EBADF (Bad file descriptor) [pid 6585] close(7) = -1 EBADF (Bad file descriptor) [pid 6585] close(8) = -1 EBADF (Bad file descriptor) [pid 6585] close(9) = -1 EBADF (Bad file descriptor) [pid 6585] close(10) = -1 EBADF (Bad file descriptor) [ 169.443066][ T6586] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 169.463997][ T6586] BTRFS info (device loop0): balance: ended with status: 0 [pid 6585] close(11) = -1 EBADF (Bad file descriptor) [pid 6585] close(12) = -1 EBADF (Bad file descriptor) [pid 6585] close(13) = -1 EBADF (Bad file descriptor) [pid 6585] close(14) = -1 EBADF (Bad file descriptor) [pid 6585] close(15) = -1 EBADF (Bad file descriptor) [pid 6585] close(16) = -1 EBADF (Bad file descriptor) [pid 6585] close(17) = -1 EBADF (Bad file descriptor) [pid 6585] close(18) = -1 EBADF (Bad file descriptor) [pid 6585] close(19) = -1 EBADF (Bad file descriptor) [pid 6585] close(20) = -1 EBADF (Bad file descriptor) [pid 6585] close(21) = -1 EBADF (Bad file descriptor) [pid 6585] close(22) = -1 EBADF (Bad file descriptor) [pid 6585] close(23) = -1 EBADF (Bad file descriptor) [pid 6585] close(24) = -1 EBADF (Bad file descriptor) [pid 6585] close(25) = -1 EBADF (Bad file descriptor) [pid 6585] close(26) = -1 EBADF (Bad file descriptor) [pid 6585] close(27) = -1 EBADF (Bad file descriptor) [pid 6585] close(28) = -1 EBADF (Bad file descriptor) [pid 6585] close(29) = -1 EBADF (Bad file descriptor) [pid 6585] exit_group(0 [pid 6586] <... futex resumed>) = ? [pid 6604] <... futex resumed>) = ? [pid 6586] +++ exited with 0 +++ [pid 6585] <... exit_group resumed>) = ? [pid 6604] +++ exited with 0 +++ [pid 6585] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=228, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./75/binderfs") = 0 [pid 5073] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./75/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./75") = 0 [pid 5073] mkdir("./76", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6605 attached , child_tidptr=0x5555570a9690) = 231 [pid 6605] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6605] chdir("./76") = 0 [pid 6605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6605] setpgid(0, 0) = 0 [pid 6605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6605] write(3, "1000", 4) = 4 [pid 6605] close(3) = 0 [pid 6605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6605] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6605] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6606 attached [pid 6606] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6606] set_robust_list(0x7f8785c4c9a0, 24 [pid 6605] <... clone3 resumed> => {parent_tid=[232]}, 88) = 232 [pid 6606] <... set_robust_list resumed>) = 0 [pid 6605] rt_sigprocmask(SIG_SETMASK, [], [pid 6606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6605] <... futex resumed>) = 0 [pid 6606] memfd_create("syzkaller", 0 [pid 6605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6606] <... memfd_create resumed>) = 3 [pid 6606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6606] munmap(0x7f877d82c000, 138412032) = 0 [pid 6606] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6606] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6606] close(3) = 0 [pid 6606] mkdir("./file0", 0777) = 0 [ 170.150025][ T6606] loop0: detected capacity change from 0 to 32768 [ 170.163976][ T6606] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6606) [ 170.179933][ T6606] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.189232][ T6606] BTRFS info (device loop0): force clearing of disk cache [ 170.196389][ T6606] BTRFS info (device loop0): setting nodatasum [ 170.202536][ T6606] BTRFS info (device loop0): allowing degraded mounts [ 170.209331][ T6606] BTRFS info (device loop0): enabling disk space caching [ 170.216444][ T6606] BTRFS info (device loop0): disk space caching is enabled [ 170.238355][ T6606] BTRFS info (device loop0): enabling ssd optimizations [ 170.245679][ T6606] BTRFS info (device loop0): auto enabling async discard [ 170.253652][ T6606] BTRFS info (device loop0): rebuilding free space tree [ 170.266599][ T6606] BTRFS info (device loop0): disabling free space tree [ 170.273490][ T6606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 170.283194][ T6606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6606] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6606] chdir("./file0") = 0 [pid 6606] ioctl(4, LOOP_CLR_FD) = 0 [ 170.296710][ T6606] BTRFS info (device loop0): checking UUID tree [pid 6606] close(4) = 0 [pid 6606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] <... futex resumed>) = 0 [pid 6605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] <... futex resumed>) = 0 [pid 6605] <... futex resumed>) = 1 [pid 6606] open("./file0", O_RDONLY [pid 6605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6606] <... open resumed>) = 4 [pid 6606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6605] <... futex resumed>) = 0 [pid 6606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] <... futex resumed>) = 0 [pid 6605] <... futex resumed>) = 1 [pid 6606] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6606] <... ioctl resumed>) = 0 [pid 6606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... futex resumed>) = 0 [pid 6605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6606] <... futex resumed>) = 1 [pid 6606] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6605] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6605] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[233]}, 88) = 233 [pid 6605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6605] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6624 attached [pid 6624] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6624] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6624] open("./file0", O_RDONLY) = 5 [pid 6624] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6605] <... futex resumed>) = 0 [pid 6624] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6605] <... futex resumed>) = 0 [pid 6624] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 170.413846][ T6606] BTRFS info (device loop0): balance: start -d -m [ 170.422858][ T6606] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 170.469614][ T6606] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6624] <... ioctl resumed>) = 0 [pid 6624] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.582359][ T6606] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 170.606363][ T6606] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6624] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6606] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] close(3) = 0 [pid 6605] close(4) = 0 [pid 6605] close(5) = 0 [ 170.626407][ T6606] BTRFS info (device loop0): balance: ended with status: 0 [pid 6605] close(6) = -1 EBADF (Bad file descriptor) [pid 6605] close(7) = -1 EBADF (Bad file descriptor) [pid 6605] close(8) = -1 EBADF (Bad file descriptor) [pid 6605] close(9) = -1 EBADF (Bad file descriptor) [pid 6605] close(10) = -1 EBADF (Bad file descriptor) [pid 6605] close(11) = -1 EBADF (Bad file descriptor) [pid 6605] close(12) = -1 EBADF (Bad file descriptor) [pid 6605] close(13) = -1 EBADF (Bad file descriptor) [pid 6605] close(14) = -1 EBADF (Bad file descriptor) [pid 6605] close(15) = -1 EBADF (Bad file descriptor) [pid 6605] close(16) = -1 EBADF (Bad file descriptor) [pid 6605] close(17) = -1 EBADF (Bad file descriptor) [pid 6605] close(18) = -1 EBADF (Bad file descriptor) [pid 6605] close(19) = -1 EBADF (Bad file descriptor) [pid 6605] close(20) = -1 EBADF (Bad file descriptor) [pid 6605] close(21) = -1 EBADF (Bad file descriptor) [pid 6605] close(22) = -1 EBADF (Bad file descriptor) [pid 6605] close(23) = -1 EBADF (Bad file descriptor) [pid 6605] close(24) = -1 EBADF (Bad file descriptor) [pid 6605] close(25) = -1 EBADF (Bad file descriptor) [pid 6605] close(26) = -1 EBADF (Bad file descriptor) [pid 6605] close(27) = -1 EBADF (Bad file descriptor) [pid 6605] close(28) = -1 EBADF (Bad file descriptor) [pid 6605] close(29) = -1 EBADF (Bad file descriptor) [pid 6605] exit_group(0 [pid 6624] <... futex resumed>) = ? [pid 6606] <... futex resumed>) = ? [pid 6624] +++ exited with 0 +++ [pid 6606] +++ exited with 0 +++ [pid 6605] <... exit_group resumed>) = ? [pid 6605] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=231, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=37 /* 0.37 s */} --- [pid 5073] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./76/binderfs") = 0 [pid 5073] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./76/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./76") = 0 [pid 5073] mkdir("./77", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6625 attached , child_tidptr=0x5555570a9690) = 234 [pid 6625] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6625] chdir("./77") = 0 [pid 6625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6625] setpgid(0, 0) = 0 [pid 6625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6625] write(3, "1000", 4) = 4 [pid 6625] close(3) = 0 [pid 6625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6625] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6625] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6626 attached [pid 6626] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6626] set_robust_list(0x7f8785c4c9a0, 24 [pid 6625] <... clone3 resumed> => {parent_tid=[235]}, 88) = 235 [pid 6626] <... set_robust_list resumed>) = 0 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], [pid 6626] rt_sigprocmask(SIG_SETMASK, [], [pid 6625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6626] memfd_create("syzkaller", 0 [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6626] <... memfd_create resumed>) = 3 [pid 6626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6626] munmap(0x7f877d82c000, 138412032) = 0 [pid 6626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6626] close(3) = 0 [pid 6626] mkdir("./file0", 0777) = 0 [ 171.284381][ T6626] loop0: detected capacity change from 0 to 32768 [ 171.309075][ T6626] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6626) [ 171.324414][ T6626] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 171.333652][ T6626] BTRFS info (device loop0): force clearing of disk cache [ 171.340858][ T6626] BTRFS info (device loop0): setting nodatasum [ 171.347100][ T6626] BTRFS info (device loop0): allowing degraded mounts [ 171.353930][ T6626] BTRFS info (device loop0): enabling disk space caching [ 171.360962][ T6626] BTRFS info (device loop0): disk space caching is enabled [ 171.382560][ T6626] BTRFS info (device loop0): enabling ssd optimizations [ 171.389551][ T6626] BTRFS info (device loop0): auto enabling async discard [ 171.398180][ T6626] BTRFS info (device loop0): rebuilding free space tree [ 171.409909][ T6626] BTRFS info (device loop0): disabling free space tree [ 171.416942][ T6626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6626] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6626] chdir("./file0") = 0 [pid 6626] ioctl(4, LOOP_CLR_FD) = 0 [pid 6626] close(4) = 0 [pid 6626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6626] open("./file0", O_RDONLY [pid 6625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] <... open resumed>) = 4 [pid 6626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6626] <... futex resumed>) = 0 [pid 6625] <... futex resumed>) = 1 [pid 6626] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6626] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 171.426644][ T6626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.439742][ T6626] BTRFS info (device loop0): checking UUID tree [pid 6625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6625] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6625] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6644 attached [ 171.481140][ T6626] BTRFS info (device loop0): balance: start -d -m [ 171.490053][ T6626] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 171.517461][ T6626] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6644] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6625] <... clone3 resumed> => {parent_tid=[236]}, 88) = 236 [pid 6644] <... rseq resumed>) = 0 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], [pid 6644] set_robust_list(0x7f8785c2b9a0, 24 [pid 6625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6644] <... set_robust_list resumed>) = 0 [pid 6644] rt_sigprocmask(SIG_SETMASK, [], [pid 6625] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6644] open("./file0", O_RDONLY) = 5 [pid 6625] <... futex resumed>) = 0 [pid 6644] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6644] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6625] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6644] <... ioctl resumed>) = 0 [pid 6644] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 171.691023][ T6626] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 171.718854][ T6626] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6644] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6626] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6625] close(3) = 0 [pid 6625] close(4) = 0 [pid 6625] close(5) = 0 [pid 6625] close(6) = -1 EBADF (Bad file descriptor) [pid 6625] close(7) = -1 EBADF (Bad file descriptor) [ 171.738328][ T6626] BTRFS info (device loop0): balance: ended with status: 0 [pid 6625] close(8) = -1 EBADF (Bad file descriptor) [pid 6625] close(9) = -1 EBADF (Bad file descriptor) [pid 6625] close(10) = -1 EBADF (Bad file descriptor) [pid 6625] close(11) = -1 EBADF (Bad file descriptor) [pid 6625] close(12) = -1 EBADF (Bad file descriptor) [pid 6625] close(13) = -1 EBADF (Bad file descriptor) [pid 6625] close(14) = -1 EBADF (Bad file descriptor) [pid 6625] close(15) = -1 EBADF (Bad file descriptor) [pid 6625] close(16) = -1 EBADF (Bad file descriptor) [pid 6625] close(17) = -1 EBADF (Bad file descriptor) [pid 6625] close(18) = -1 EBADF (Bad file descriptor) [pid 6625] close(19) = -1 EBADF (Bad file descriptor) [pid 6625] close(20) = -1 EBADF (Bad file descriptor) [pid 6625] close(21) = -1 EBADF (Bad file descriptor) [pid 6625] close(22) = -1 EBADF (Bad file descriptor) [pid 6625] close(23) = -1 EBADF (Bad file descriptor) [pid 6625] close(24) = -1 EBADF (Bad file descriptor) [pid 6625] close(25) = -1 EBADF (Bad file descriptor) [pid 6625] close(26) = -1 EBADF (Bad file descriptor) [pid 6625] close(27) = -1 EBADF (Bad file descriptor) [pid 6625] close(28) = -1 EBADF (Bad file descriptor) [pid 6625] close(29) = -1 EBADF (Bad file descriptor) [pid 6625] exit_group(0 [pid 6644] <... futex resumed>) = ? [pid 6644] +++ exited with 0 +++ [pid 6626] <... futex resumed>) = ? [pid 6625] <... exit_group resumed>) = ? [pid 6626] +++ exited with 0 +++ [pid 6625] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=234, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./77/binderfs") = 0 [pid 5073] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./77/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./77") = 0 [pid 5073] mkdir("./78", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6645 attached , child_tidptr=0x5555570a9690) = 237 [pid 6645] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6645] chdir("./78") = 0 [pid 6645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6645] setpgid(0, 0) = 0 [pid 6645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6645] write(3, "1000", 4) = 4 [pid 6645] close(3) = 0 [pid 6645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6645] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6645] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6646 attached [pid 6646] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6645] <... clone3 resumed> => {parent_tid=[238]}, 88) = 238 [pid 6646] <... rseq resumed>) = 0 [pid 6645] rt_sigprocmask(SIG_SETMASK, [], [pid 6646] set_robust_list(0x7f8785c4c9a0, 24 [pid 6645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6646] <... set_robust_list resumed>) = 0 [pid 6645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] rt_sigprocmask(SIG_SETMASK, [], [pid 6645] <... futex resumed>) = 0 [pid 6646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6646] memfd_create("syzkaller", 0) = 3 [pid 6646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6646] munmap(0x7f877d82c000, 138412032) = 0 [pid 6646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6646] close(3) = 0 [pid 6646] mkdir("./file0", 0777) = 0 [ 172.352533][ T6646] loop0: detected capacity change from 0 to 32768 [ 172.372658][ T6646] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6646) [ 172.387953][ T6646] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 172.397237][ T6646] BTRFS info (device loop0): force clearing of disk cache [ 172.404387][ T6646] BTRFS info (device loop0): setting nodatasum [ 172.410550][ T6646] BTRFS info (device loop0): allowing degraded mounts [ 172.417358][ T6646] BTRFS info (device loop0): enabling disk space caching [ 172.424434][ T6646] BTRFS info (device loop0): disk space caching is enabled [ 172.446177][ T6646] BTRFS info (device loop0): enabling ssd optimizations [ 172.453122][ T6646] BTRFS info (device loop0): auto enabling async discard [ 172.461148][ T6646] BTRFS info (device loop0): rebuilding free space tree [ 172.472926][ T6646] BTRFS info (device loop0): disabling free space tree [ 172.480258][ T6646] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.490252][ T6646] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6646] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6646] chdir("./file0") = 0 [pid 6646] ioctl(4, LOOP_CLR_FD) = 0 [pid 6646] close(4) = 0 [pid 6646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6645] <... futex resumed>) = 0 [pid 6646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6646] <... futex resumed>) = 0 [pid 6645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] open("./file0", O_RDONLY) = 4 [ 172.504406][ T6646] BTRFS info (device loop0): checking UUID tree [pid 6646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6645] <... futex resumed>) = 0 [pid 6646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6646] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6645] <... futex resumed>) = 0 [pid 6645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6646] <... ioctl resumed>) = 0 [pid 6646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6645] <... futex resumed>) = 0 [pid 6646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6645] <... futex resumed>) = 0 [pid 6646] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6645] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6645] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[239]}, 88) = 239 [pid 6645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6645] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6645] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6664 attached [pid 6664] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6664] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6664] open("./file0", O_RDONLY) = 5 [pid 6664] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6645] <... futex resumed>) = 0 [pid 6664] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6645] <... futex resumed>) = 0 [pid 6664] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 172.590968][ T6646] BTRFS info (device loop0): balance: start -d -m [ 172.602015][ T6646] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 172.630472][ T6646] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6645] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6664] <... ioctl resumed>) = 0 [pid 6664] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 172.777933][ T6646] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 172.802147][ T6646] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6664] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6646] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] close(3) = 0 [pid 6645] close(4) = 0 [pid 6645] close(5) = 0 [pid 6645] close(6) = -1 EBADF (Bad file descriptor) [pid 6645] close(7) = -1 EBADF (Bad file descriptor) [ 172.824286][ T6646] BTRFS info (device loop0): balance: ended with status: 0 [pid 6645] close(8) = -1 EBADF (Bad file descriptor) [pid 6645] close(9) = -1 EBADF (Bad file descriptor) [pid 6645] close(10) = -1 EBADF (Bad file descriptor) [pid 6645] close(11) = -1 EBADF (Bad file descriptor) [pid 6645] close(12) = -1 EBADF (Bad file descriptor) [pid 6645] close(13) = -1 EBADF (Bad file descriptor) [pid 6645] close(14) = -1 EBADF (Bad file descriptor) [pid 6645] close(15) = -1 EBADF (Bad file descriptor) [pid 6645] close(16) = -1 EBADF (Bad file descriptor) [pid 6645] close(17) = -1 EBADF (Bad file descriptor) [pid 6645] close(18) = -1 EBADF (Bad file descriptor) [pid 6645] close(19) = -1 EBADF (Bad file descriptor) [pid 6645] close(20) = -1 EBADF (Bad file descriptor) [pid 6645] close(21) = -1 EBADF (Bad file descriptor) [pid 6645] close(22) = -1 EBADF (Bad file descriptor) [pid 6645] close(23) = -1 EBADF (Bad file descriptor) [pid 6645] close(24) = -1 EBADF (Bad file descriptor) [pid 6645] close(25) = -1 EBADF (Bad file descriptor) [pid 6645] close(26) = -1 EBADF (Bad file descriptor) [pid 6645] close(27) = -1 EBADF (Bad file descriptor) [pid 6645] close(28) = -1 EBADF (Bad file descriptor) [pid 6645] close(29) = -1 EBADF (Bad file descriptor) [pid 6645] exit_group(0 [pid 6664] <... futex resumed>) = ? [pid 6664] +++ exited with 0 +++ [pid 6645] <... exit_group resumed>) = ? [pid 6646] <... futex resumed>) = ? [pid 6646] +++ exited with 0 +++ [pid 6645] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=237, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=45 /* 0.45 s */} --- [pid 5073] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./78/binderfs") = 0 [pid 5073] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./78/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./78") = 0 [pid 5073] mkdir("./79", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6665 attached , child_tidptr=0x5555570a9690) = 240 [pid 6665] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6665] chdir("./79") = 0 [pid 6665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6665] setpgid(0, 0) = 0 [pid 6665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6665] write(3, "1000", 4) = 4 [pid 6665] close(3) = 0 [pid 6665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6665] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6665] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6666 attached [pid 6666] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6666] set_robust_list(0x7f8785c4c9a0, 24 [pid 6665] <... clone3 resumed> => {parent_tid=[241]}, 88) = 241 [pid 6666] <... set_robust_list resumed>) = 0 [pid 6665] rt_sigprocmask(SIG_SETMASK, [], [pid 6666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6666] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6665] <... futex resumed>) = 0 [pid 6665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6666] memfd_create("syzkaller", 0) = 3 [pid 6666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6666] munmap(0x7f877d82c000, 138412032) = 0 [pid 6666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6666] close(3) = 0 [pid 6666] mkdir("./file0", 0777) = 0 [ 173.479605][ T6666] loop0: detected capacity change from 0 to 32768 [ 173.503585][ T6666] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6666) [ 173.519794][ T6666] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 173.529067][ T6666] BTRFS info (device loop0): force clearing of disk cache [ 173.536211][ T6666] BTRFS info (device loop0): setting nodatasum [ 173.542354][ T6666] BTRFS info (device loop0): allowing degraded mounts [ 173.549172][ T6666] BTRFS info (device loop0): enabling disk space caching [ 173.556249][ T6666] BTRFS info (device loop0): disk space caching is enabled [ 173.578756][ T6666] BTRFS info (device loop0): enabling ssd optimizations [ 173.585851][ T6666] BTRFS info (device loop0): auto enabling async discard [ 173.593972][ T6666] BTRFS info (device loop0): rebuilding free space tree [ 173.606052][ T6666] BTRFS info (device loop0): disabling free space tree [ 173.612976][ T6666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6666] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6666] chdir("./file0") = 0 [pid 6666] ioctl(4, LOOP_CLR_FD) = 0 [pid 6666] close(4) = 0 [pid 6666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... futex resumed>) = 0 [pid 6666] <... futex resumed>) = 1 [pid 6665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6666] open("./file0", O_RDONLY [pid 6665] <... futex resumed>) = 0 [pid 6666] <... open resumed>) = 4 [pid 6665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... futex resumed>) = 0 [pid 6666] <... futex resumed>) = 1 [pid 6665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6666] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6666] <... ioctl resumed>) = 0 [pid 6666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6665] <... futex resumed>) = 0 [pid 6665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 173.622708][ T6666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.636184][ T6666] BTRFS info (device loop0): checking UUID tree [pid 6666] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6665] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6665] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6665] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6684 attached => {parent_tid=[242]}, 88) = 242 [pid 6665] rt_sigprocmask(SIG_SETMASK, [], [pid 6684] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6665] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] set_robust_list(0x7f8785c2b9a0, 24 [pid 6665] <... futex resumed>) = 0 [pid 6684] <... set_robust_list resumed>) = 0 [pid 6665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6684] open("./file0", O_RDONLY) = 5 [pid 6684] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6665] <... futex resumed>) = 0 [pid 6684] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6665] <... futex resumed>) = 0 [pid 6684] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 173.686626][ T6666] BTRFS info (device loop0): balance: start -d -m [ 173.697486][ T6666] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 173.722630][ T6666] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6684] <... ioctl resumed>) = 0 [pid 6684] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 173.902825][ T6666] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 173.927524][ T6666] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6684] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6666] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] close(3) = 0 [pid 6665] close(4) = 0 [pid 6665] close(5) = 0 [pid 6665] close(6) = -1 EBADF (Bad file descriptor) [pid 6665] close(7) = -1 EBADF (Bad file descriptor) [pid 6665] close(8) = -1 EBADF (Bad file descriptor) [pid 6665] close(9) = -1 EBADF (Bad file descriptor) [ 173.947276][ T6666] BTRFS info (device loop0): balance: ended with status: 0 [pid 6665] close(10) = -1 EBADF (Bad file descriptor) [pid 6665] close(11) = -1 EBADF (Bad file descriptor) [pid 6665] close(12) = -1 EBADF (Bad file descriptor) [pid 6665] close(13) = -1 EBADF (Bad file descriptor) [pid 6665] close(14) = -1 EBADF (Bad file descriptor) [pid 6665] close(15) = -1 EBADF (Bad file descriptor) [pid 6665] close(16) = -1 EBADF (Bad file descriptor) [pid 6665] close(17) = -1 EBADF (Bad file descriptor) [pid 6665] close(18) = -1 EBADF (Bad file descriptor) [pid 6665] close(19) = -1 EBADF (Bad file descriptor) [pid 6665] close(20) = -1 EBADF (Bad file descriptor) [pid 6665] close(21) = -1 EBADF (Bad file descriptor) [pid 6665] close(22) = -1 EBADF (Bad file descriptor) [pid 6665] close(23) = -1 EBADF (Bad file descriptor) [pid 6665] close(24) = -1 EBADF (Bad file descriptor) [pid 6665] close(25) = -1 EBADF (Bad file descriptor) [pid 6665] close(26) = -1 EBADF (Bad file descriptor) [pid 6665] close(27) = -1 EBADF (Bad file descriptor) [pid 6665] close(28) = -1 EBADF (Bad file descriptor) [pid 6665] close(29) = -1 EBADF (Bad file descriptor) [pid 6665] exit_group(0) = ? [pid 6684] <... futex resumed>) = ? [pid 6684] +++ exited with 0 +++ [pid 6666] <... futex resumed>) = ? [pid 6666] +++ exited with 0 +++ [pid 6665] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=240, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./79/binderfs") = 0 [pid 5073] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./79/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./79") = 0 [pid 5073] mkdir("./80", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6685 attached [pid 6685] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 243 [pid 6685] <... set_robust_list resumed>) = 0 [pid 6685] chdir("./80") = 0 [pid 6685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6685] setpgid(0, 0) = 0 [pid 6685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6685] write(3, "1000", 4) = 4 [pid 6685] close(3) = 0 [pid 6685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6685] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6685] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6686 attached [pid 6686] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6685] <... clone3 resumed> => {parent_tid=[244]}, 88) = 244 [pid 6686] <... rseq resumed>) = 0 [pid 6685] rt_sigprocmask(SIG_SETMASK, [], [pid 6686] set_robust_list(0x7f8785c4c9a0, 24 [pid 6685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6686] <... set_robust_list resumed>) = 0 [pid 6686] rt_sigprocmask(SIG_SETMASK, [], [pid 6685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6686] memfd_create("syzkaller", 0 [pid 6685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6686] <... memfd_create resumed>) = 3 [pid 6686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6686] munmap(0x7f877d82c000, 138412032) = 0 [pid 6686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6686] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6686] close(3) = 0 [pid 6686] mkdir("./file0", 0777) = 0 [ 174.591593][ T6686] loop0: detected capacity change from 0 to 32768 [ 174.606530][ T6686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6686) [ 174.622410][ T6686] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 174.631694][ T6686] BTRFS info (device loop0): force clearing of disk cache [ 174.638880][ T6686] BTRFS info (device loop0): setting nodatasum [ 174.645103][ T6686] BTRFS info (device loop0): allowing degraded mounts [ 174.651876][ T6686] BTRFS info (device loop0): enabling disk space caching [ 174.658988][ T6686] BTRFS info (device loop0): disk space caching is enabled [ 174.680951][ T6686] BTRFS info (device loop0): enabling ssd optimizations [ 174.688044][ T6686] BTRFS info (device loop0): auto enabling async discard [ 174.696314][ T6686] BTRFS info (device loop0): rebuilding free space tree [ 174.708646][ T6686] BTRFS info (device loop0): disabling free space tree [ 174.715631][ T6686] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.725289][ T6686] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6686] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6686] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6686] chdir("./file0") = 0 [pid 6686] ioctl(4, LOOP_CLR_FD) = 0 [pid 6686] close(4) = 0 [pid 6686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6685] <... futex resumed>) = 0 [pid 6686] open("./file0", O_RDONLY [pid 6685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] <... open resumed>) = 4 [pid 6685] <... futex resumed>) = 0 [ 174.738214][ T6686] BTRFS info (device loop0): checking UUID tree [pid 6685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6685] <... futex resumed>) = 0 [pid 6686] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] <... ioctl resumed>) = 0 [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6685] <... futex resumed>) = 0 [pid 6686] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6685] <... futex resumed>) = 0 [pid 6686] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6685] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6685] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[245]}, 88) = 245 [pid 6685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6685] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6704 attached [pid 6685] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6704] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6704] open("./file0", O_RDONLY) = 5 [pid 6704] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6704] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6704] <... futex resumed>) = 0 [pid 6704] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 174.830348][ T6686] BTRFS info (device loop0): balance: start -d -m [ 174.839017][ T6686] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 174.865890][ T6686] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6685] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 174.954596][ T6686] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6704] <... ioctl resumed>) = 0 [pid 6704] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6686] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] close(3 [pid 6686] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] <... close resumed>) = 0 [pid 6685] close(4) = 0 [pid 6685] close(5) = 0 [pid 6685] close(6) = -1 EBADF (Bad file descriptor) [pid 6685] close(7) = -1 EBADF (Bad file descriptor) [pid 6685] close(8) = -1 EBADF (Bad file descriptor) [pid 6685] close(9) = -1 EBADF (Bad file descriptor) [pid 6685] close(10) = -1 EBADF (Bad file descriptor) [pid 6685] close(11) = -1 EBADF (Bad file descriptor) [pid 6685] close(12) = -1 EBADF (Bad file descriptor) [pid 6685] close(13) = -1 EBADF (Bad file descriptor) [pid 6685] close(14) = -1 EBADF (Bad file descriptor) [pid 6685] close(15) = -1 EBADF (Bad file descriptor) [pid 6685] close(16) = -1 EBADF (Bad file descriptor) [ 175.026305][ T6686] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 175.045419][ T6686] BTRFS info (device loop0): balance: ended with status: 0 [pid 6685] close(17) = -1 EBADF (Bad file descriptor) [pid 6685] close(18) = -1 EBADF (Bad file descriptor) [pid 6685] close(19) = -1 EBADF (Bad file descriptor) [pid 6685] close(20) = -1 EBADF (Bad file descriptor) [pid 6685] close(21) = -1 EBADF (Bad file descriptor) [pid 6685] close(22) = -1 EBADF (Bad file descriptor) [pid 6685] close(23) = -1 EBADF (Bad file descriptor) [pid 6685] close(24) = -1 EBADF (Bad file descriptor) [pid 6685] close(25) = -1 EBADF (Bad file descriptor) [pid 6685] close(26) = -1 EBADF (Bad file descriptor) [pid 6685] close(27) = -1 EBADF (Bad file descriptor) [pid 6685] close(28) = -1 EBADF (Bad file descriptor) [pid 6685] close(29) = -1 EBADF (Bad file descriptor) [pid 6685] exit_group(0) = ? [pid 6704] <... futex resumed>) = ? [pid 6686] <... futex resumed>) = ? [pid 6704] +++ exited with 0 +++ [pid 6686] +++ exited with 0 +++ [pid 6685] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=243, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./80/binderfs") = 0 [pid 5073] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./80/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./80") = 0 [pid 5073] mkdir("./81", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6705 attached [pid 6705] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 246 [pid 6705] <... set_robust_list resumed>) = 0 [pid 6705] chdir("./81") = 0 [pid 6705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6705] setpgid(0, 0) = 0 [pid 6705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6705] write(3, "1000", 4) = 4 [pid 6705] close(3) = 0 [pid 6705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6705] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6705] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6706 attached [pid 6706] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6706] set_robust_list(0x7f8785c4c9a0, 24 [pid 6705] <... clone3 resumed> => {parent_tid=[247]}, 88) = 247 [pid 6706] <... set_robust_list resumed>) = 0 [pid 6705] rt_sigprocmask(SIG_SETMASK, [], [pid 6706] rt_sigprocmask(SIG_SETMASK, [], [pid 6705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] memfd_create("syzkaller", 0 [pid 6705] <... futex resumed>) = 0 [pid 6705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6706] <... memfd_create resumed>) = 3 [pid 6706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6706] munmap(0x7f877d82c000, 138412032) = 0 [pid 6706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6706] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6706] close(3) = 0 [pid 6706] mkdir("./file0", 0777) = 0 [ 175.671812][ T6706] loop0: detected capacity change from 0 to 32768 [ 175.696272][ T6706] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6706) [ 175.712086][ T6706] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.721400][ T6706] BTRFS info (device loop0): force clearing of disk cache [ 175.728605][ T6706] BTRFS info (device loop0): setting nodatasum [ 175.734850][ T6706] BTRFS info (device loop0): allowing degraded mounts [ 175.741620][ T6706] BTRFS info (device loop0): enabling disk space caching [ 175.748947][ T6706] BTRFS info (device loop0): disk space caching is enabled [ 175.770655][ T6706] BTRFS info (device loop0): enabling ssd optimizations [ 175.777648][ T6706] BTRFS info (device loop0): auto enabling async discard [ 175.785753][ T6706] BTRFS info (device loop0): rebuilding free space tree [ 175.797737][ T6706] BTRFS info (device loop0): disabling free space tree [ 175.804688][ T6706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6706] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6706] chdir("./file0") = 0 [pid 6706] ioctl(4, LOOP_CLR_FD) = 0 [pid 6706] close(4) = 0 [pid 6706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... futex resumed>) = 0 [pid 6706] <... futex resumed>) = 1 [pid 6705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] open("./file0", O_RDONLY [pid 6705] <... futex resumed>) = 0 [pid 6705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] <... open resumed>) = 4 [pid 6706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] <... futex resumed>) = 0 [pid 6705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = 0 [pid 6705] <... futex resumed>) = 1 [pid 6706] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] <... futex resumed>) = 0 [pid 6705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6705] <... futex resumed>) = 0 [pid 6706] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 175.814356][ T6706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.827930][ T6706] BTRFS info (device loop0): checking UUID tree [pid 6705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6705] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6705] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[248]}, 88) = 248 [pid 6705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6705] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6724 attached [pid 6724] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6724] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6724] open("./file0", O_RDONLY) = 5 [pid 6724] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6705] <... futex resumed>) = 0 [pid 6724] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6724] <... futex resumed>) = 0 [ 175.882162][ T6706] BTRFS info (device loop0): balance: start -d -m [ 175.891510][ T6706] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 175.916537][ T6706] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6724] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 176.024262][ T6706] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6724] <... ioctl resumed>) = 0 [pid 6724] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6706] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6705] close(3 [pid 6706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] <... close resumed>) = 0 [pid 6705] close(4) = 0 [pid 6705] close(5) = 0 [pid 6705] close(6) = -1 EBADF (Bad file descriptor) [pid 6705] close(7) = -1 EBADF (Bad file descriptor) [pid 6705] close(8) = -1 EBADF (Bad file descriptor) [pid 6705] close(9) = -1 EBADF (Bad file descriptor) [pid 6705] close(10) = -1 EBADF (Bad file descriptor) [pid 6705] close(11) = -1 EBADF (Bad file descriptor) [pid 6705] close(12) = -1 EBADF (Bad file descriptor) [ 176.124308][ T6706] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 176.144032][ T6706] BTRFS info (device loop0): balance: ended with status: 0 [pid 6705] close(13) = -1 EBADF (Bad file descriptor) [pid 6705] close(14) = -1 EBADF (Bad file descriptor) [pid 6705] close(15) = -1 EBADF (Bad file descriptor) [pid 6705] close(16) = -1 EBADF (Bad file descriptor) [pid 6705] close(17) = -1 EBADF (Bad file descriptor) [pid 6705] close(18) = -1 EBADF (Bad file descriptor) [pid 6705] close(19) = -1 EBADF (Bad file descriptor) [pid 6705] close(20) = -1 EBADF (Bad file descriptor) [pid 6705] close(21) = -1 EBADF (Bad file descriptor) [pid 6705] close(22) = -1 EBADF (Bad file descriptor) [pid 6705] close(23) = -1 EBADF (Bad file descriptor) [pid 6705] close(24) = -1 EBADF (Bad file descriptor) [pid 6705] close(25) = -1 EBADF (Bad file descriptor) [pid 6705] close(26) = -1 EBADF (Bad file descriptor) [pid 6705] close(27) = -1 EBADF (Bad file descriptor) [pid 6705] close(28) = -1 EBADF (Bad file descriptor) [pid 6705] close(29) = -1 EBADF (Bad file descriptor) [pid 6705] exit_group(0 [pid 6724] <... futex resumed>) = ? [pid 6706] <... futex resumed>) = ? [pid 6705] <... exit_group resumed>) = ? [pid 6724] +++ exited with 0 +++ [pid 6706] +++ exited with 0 +++ [pid 6705] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=246, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./81/binderfs") = 0 [pid 5073] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./81/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./81") = 0 [pid 5073] mkdir("./82", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6725 attached [pid 6725] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6725] chdir("./82") = 0 [pid 6725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6725] setpgid(0, 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 249 [pid 6725] <... setpgid resumed>) = 0 [pid 6725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6725] write(3, "1000", 4) = 4 [pid 6725] close(3) = 0 [pid 6725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6725] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6725] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6726 attached => {parent_tid=[250]}, 88) = 250 [pid 6726] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6726] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6725] rt_sigprocmask(SIG_SETMASK, [], [pid 6726] rt_sigprocmask(SIG_SETMASK, [], [pid 6725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] memfd_create("syzkaller", 0 [pid 6725] <... futex resumed>) = 0 [pid 6725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6726] <... memfd_create resumed>) = 3 [pid 6726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6726] munmap(0x7f877d82c000, 138412032) = 0 [pid 6726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6726] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6726] close(3) = 0 [pid 6726] mkdir("./file0", 0777) = 0 [ 176.751453][ T6726] loop0: detected capacity change from 0 to 32768 [ 176.776355][ T6726] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6726) [ 176.792035][ T6726] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 176.801324][ T6726] BTRFS info (device loop0): force clearing of disk cache [ 176.808466][ T6726] BTRFS info (device loop0): setting nodatasum [ 176.814655][ T6726] BTRFS info (device loop0): allowing degraded mounts [ 176.821432][ T6726] BTRFS info (device loop0): enabling disk space caching [ 176.828525][ T6726] BTRFS info (device loop0): disk space caching is enabled [ 176.850071][ T6726] BTRFS info (device loop0): enabling ssd optimizations [ 176.857069][ T6726] BTRFS info (device loop0): auto enabling async discard [ 176.865169][ T6726] BTRFS info (device loop0): rebuilding free space tree [ 176.877002][ T6726] BTRFS info (device loop0): disabling free space tree [ 176.884268][ T6726] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6726] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6726] chdir("./file0") = 0 [pid 6726] ioctl(4, LOOP_CLR_FD) = 0 [pid 6726] close(4) = 0 [pid 6726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] <... futex resumed>) = 0 [pid 6726] <... futex resumed>) = 1 [pid 6725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] open("./file0", O_RDONLY [pid 6725] <... futex resumed>) = 0 [pid 6725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] <... open resumed>) = 4 [ 176.893949][ T6726] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.907052][ T6726] BTRFS info (device loop0): checking UUID tree [pid 6726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] <... futex resumed>) = 0 [pid 6725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... futex resumed>) = 0 [pid 6725] <... futex resumed>) = 1 [pid 6726] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] <... futex resumed>) = 0 [pid 6726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... futex resumed>) = 0 [pid 6725] <... futex resumed>) = 1 [pid 6726] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6725] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6725] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[251]}, 88) = 251 [pid 6725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6744 attached [pid 6744] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6725] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... rseq resumed>) = 0 [pid 6744] set_robust_list(0x7f8785c2b9a0, 24 [pid 6725] <... futex resumed>) = 0 [pid 6744] <... set_robust_list resumed>) = 0 [pid 6725] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6744] open("./file0", O_RDONLY) = 5 [pid 6744] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6725] <... futex resumed>) = 0 [pid 6725] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6725] <... futex resumed>) = 0 [ 176.980138][ T6726] BTRFS info (device loop0): balance: start -d -m [ 176.989874][ T6726] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 177.017927][ T6726] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6725] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6744] <... ioctl resumed>) = 0 [pid 6744] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 177.197615][ T6726] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 177.222626][ T6726] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6744] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6726] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] close(3) = 0 [pid 6725] close(4) = 0 [pid 6725] close(5) = 0 [pid 6725] close(6) = -1 EBADF (Bad file descriptor) [pid 6725] close(7) = -1 EBADF (Bad file descriptor) [ 177.243753][ T6726] BTRFS info (device loop0): balance: ended with status: 0 [pid 6725] close(8) = -1 EBADF (Bad file descriptor) [pid 6725] close(9) = -1 EBADF (Bad file descriptor) [pid 6725] close(10) = -1 EBADF (Bad file descriptor) [pid 6725] close(11) = -1 EBADF (Bad file descriptor) [pid 6725] close(12) = -1 EBADF (Bad file descriptor) [pid 6725] close(13) = -1 EBADF (Bad file descriptor) [pid 6725] close(14) = -1 EBADF (Bad file descriptor) [pid 6725] close(15) = -1 EBADF (Bad file descriptor) [pid 6725] close(16) = -1 EBADF (Bad file descriptor) [pid 6725] close(17) = -1 EBADF (Bad file descriptor) [pid 6725] close(18) = -1 EBADF (Bad file descriptor) [pid 6725] close(19) = -1 EBADF (Bad file descriptor) [pid 6725] close(20) = -1 EBADF (Bad file descriptor) [pid 6725] close(21) = -1 EBADF (Bad file descriptor) [pid 6725] close(22) = -1 EBADF (Bad file descriptor) [pid 6725] close(23) = -1 EBADF (Bad file descriptor) [pid 6725] close(24) = -1 EBADF (Bad file descriptor) [pid 6725] close(25) = -1 EBADF (Bad file descriptor) [pid 6725] close(26) = -1 EBADF (Bad file descriptor) [pid 6725] close(27) = -1 EBADF (Bad file descriptor) [pid 6725] close(28) = -1 EBADF (Bad file descriptor) [pid 6725] close(29) = -1 EBADF (Bad file descriptor) [pid 6725] exit_group(0 [pid 6744] <... futex resumed>) = ? [pid 6744] +++ exited with 0 +++ [pid 6725] <... exit_group resumed>) = ? [pid 6726] <... futex resumed>) = ? [pid 6726] +++ exited with 0 +++ [pid 6725] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=249, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=46 /* 0.46 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./82/binderfs") = 0 [pid 5073] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./82/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./82") = 0 [pid 5073] mkdir("./83", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6745 attached [pid 6745] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 252 [pid 6745] chdir("./83") = 0 [pid 6745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6745] setpgid(0, 0) = 0 [pid 6745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6745] write(3, "1000", 4) = 4 [pid 6745] close(3) = 0 [pid 6745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6745] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6745] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6746 attached [pid 6746] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6745] <... clone3 resumed> => {parent_tid=[253]}, 88) = 253 [pid 6745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] <... rseq resumed>) = 0 [pid 6746] set_robust_list(0x7f8785c4c9a0, 24 [pid 6745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6746] <... set_robust_list resumed>) = 0 [pid 6746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6746] memfd_create("syzkaller", 0) = 3 [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6746] munmap(0x7f877d82c000, 138412032) = 0 [pid 6746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6746] close(3) = 0 [pid 6746] mkdir("./file0", 0777) = 0 [ 177.898361][ T6746] loop0: detected capacity change from 0 to 32768 [ 177.917978][ T6746] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6746) [ 177.934751][ T6746] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 177.944058][ T6746] BTRFS info (device loop0): force clearing of disk cache [ 177.951179][ T6746] BTRFS info (device loop0): setting nodatasum [ 177.957356][ T6746] BTRFS info (device loop0): allowing degraded mounts [ 177.964145][ T6746] BTRFS info (device loop0): enabling disk space caching [ 177.971171][ T6746] BTRFS info (device loop0): disk space caching is enabled [ 177.993375][ T6746] BTRFS info (device loop0): enabling ssd optimizations [ 178.000395][ T6746] BTRFS info (device loop0): auto enabling async discard [ 178.008570][ T6746] BTRFS info (device loop0): rebuilding free space tree [ 178.020396][ T6746] BTRFS info (device loop0): disabling free space tree [ 178.027382][ T6746] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.037078][ T6746] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6746] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6746] chdir("./file0") = 0 [pid 6746] ioctl(4, LOOP_CLR_FD) = 0 [pid 6746] close(4) = 0 [pid 6746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6746] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6746] <... futex resumed>) = 0 [pid 6745] <... futex resumed>) = 1 [pid 6746] open("./file0", O_RDONLY [pid 6745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] <... open resumed>) = 4 [ 178.050372][ T6746] BTRFS info (device loop0): checking UUID tree [pid 6746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6746] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6746] <... futex resumed>) = 0 [pid 6746] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... futex resumed>) = 1 [pid 6746] <... futex resumed>) = 0 [pid 6745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6745] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] <... futex resumed>) = 0 [ 178.149536][ T6746] BTRFS info (device loop0): balance: start -d -m [ 178.159785][ T6746] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6746] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6745] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6745] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[254]}, 88) = 254 [pid 6745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6745] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6764 attached [pid 6764] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6764] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6764] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6764] open("./file0", O_RDONLY) = 5 [pid 6764] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6764] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... futex resumed>) = 0 [pid 6745] <... futex resumed>) = 1 [pid 6764] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 178.191763][ T6746] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6745] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6764] <... ioctl resumed>) = 0 [pid 6764] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 178.315823][ T6746] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 178.342983][ T6746] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6764] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6746] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] close(3) = 0 [pid 6745] close(4) = 0 [pid 6745] close(5) = 0 [pid 6745] close(6) = -1 EBADF (Bad file descriptor) [pid 6745] close(7) = -1 EBADF (Bad file descriptor) [pid 6745] close(8) = -1 EBADF (Bad file descriptor) [pid 6745] close(9) = -1 EBADF (Bad file descriptor) [pid 6745] close(10) = -1 EBADF (Bad file descriptor) [pid 6745] close(11) = -1 EBADF (Bad file descriptor) [pid 6745] close(12) = -1 EBADF (Bad file descriptor) [pid 6745] close(13) = -1 EBADF (Bad file descriptor) [pid 6745] close(14) = -1 EBADF (Bad file descriptor) [pid 6745] close(15) = -1 EBADF (Bad file descriptor) [pid 6745] close(16) = -1 EBADF (Bad file descriptor) [pid 6745] close(17) = -1 EBADF (Bad file descriptor) [ 178.365687][ T6746] BTRFS info (device loop0): balance: ended with status: 0 [pid 6745] close(18) = -1 EBADF (Bad file descriptor) [pid 6745] close(19) = -1 EBADF (Bad file descriptor) [pid 6745] close(20) = -1 EBADF (Bad file descriptor) [pid 6745] close(21) = -1 EBADF (Bad file descriptor) [pid 6745] close(22) = -1 EBADF (Bad file descriptor) [pid 6745] close(23) = -1 EBADF (Bad file descriptor) [pid 6745] close(24) = -1 EBADF (Bad file descriptor) [pid 6745] close(25) = -1 EBADF (Bad file descriptor) [pid 6745] close(26) = -1 EBADF (Bad file descriptor) [pid 6745] close(27) = -1 EBADF (Bad file descriptor) [pid 6745] close(28) = -1 EBADF (Bad file descriptor) [pid 6745] close(29) = -1 EBADF (Bad file descriptor) [pid 6745] exit_group(0 [pid 6764] <... futex resumed>) = ? [pid 6746] <... futex resumed>) = ? [pid 6745] <... exit_group resumed>) = ? [pid 6764] +++ exited with 0 +++ [pid 6746] +++ exited with 0 +++ [pid 6745] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=252, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./83/binderfs") = 0 [pid 5073] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./83/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./83") = 0 [pid 5073] mkdir("./84", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6765 attached [pid 6765] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 255 [pid 6765] <... set_robust_list resumed>) = 0 [pid 6765] chdir("./84") = 0 [pid 6765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6765] setpgid(0, 0) = 0 [pid 6765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6765] write(3, "1000", 4) = 4 [pid 6765] close(3) = 0 [pid 6765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6765] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6765] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6766 attached [pid 6766] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6766] set_robust_list(0x7f8785c4c9a0, 24 [pid 6765] <... clone3 resumed> => {parent_tid=[256]}, 88) = 256 [pid 6766] <... set_robust_list resumed>) = 0 [pid 6765] rt_sigprocmask(SIG_SETMASK, [], [pid 6766] rt_sigprocmask(SIG_SETMASK, [], [pid 6765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] memfd_create("syzkaller", 0 [pid 6765] <... futex resumed>) = 0 [pid 6765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6766] <... memfd_create resumed>) = 3 [pid 6766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6766] munmap(0x7f877d82c000, 138412032) = 0 [pid 6766] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6766] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6766] close(3) = 0 [pid 6766] mkdir("./file0", 0777) = 0 [ 178.857585][ T6766] loop0: detected capacity change from 0 to 32768 [ 178.872281][ T6766] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6766) [ 178.888520][ T6766] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 178.897825][ T6766] BTRFS info (device loop0): force clearing of disk cache [ 178.905020][ T6766] BTRFS info (device loop0): setting nodatasum [ 178.911435][ T6766] BTRFS info (device loop0): allowing degraded mounts [ 178.918590][ T6766] BTRFS info (device loop0): enabling disk space caching [ 178.925799][ T6766] BTRFS info (device loop0): disk space caching is enabled [ 178.948190][ T6766] BTRFS info (device loop0): enabling ssd optimizations [ 178.955230][ T6766] BTRFS info (device loop0): auto enabling async discard [ 178.962981][ T6766] BTRFS info (device loop0): rebuilding free space tree [ 178.974858][ T6766] BTRFS info (device loop0): disabling free space tree [ 178.981762][ T6766] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6766] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6766] chdir("./file0") = 0 [pid 6766] ioctl(4, LOOP_CLR_FD) = 0 [pid 6766] close(4) = 0 [pid 6766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6765] <... futex resumed>) = 0 [pid 6765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] open("./file0", O_RDONLY) = 4 [pid 6765] <... futex resumed>) = 0 [ 178.991709][ T6766] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.005252][ T6766] BTRFS info (device loop0): checking UUID tree [pid 6765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6765] <... futex resumed>) = 0 [pid 6766] <... futex resumed>) = 1 [pid 6765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6765] <... futex resumed>) = 0 [pid 6766] <... ioctl resumed>) = 0 [pid 6765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6765] <... futex resumed>) = 0 [pid 6765] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6765] <... futex resumed>) = 0 [ 179.085336][ T6766] BTRFS info (device loop0): balance: start -d -m [ 179.095163][ T6766] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6765] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6765] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6765] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[257]}, 88) = 257 [pid 6765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6765] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6765] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6784 attached [pid 6784] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6784] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6784] open("./file0", O_RDONLY) = 5 [pid 6784] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6765] <... futex resumed>) = 0 [pid 6784] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6765] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6765] <... futex resumed>) = 0 [pid 6784] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 179.125535][ T6766] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6765] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6784] <... ioctl resumed>) = 0 [pid 6784] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 179.272332][ T6766] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 179.296707][ T6766] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6784] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6766] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6766] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6765] close(3) = 0 [pid 6765] close(4) = 0 [pid 6765] close(5) = 0 [pid 6765] close(6) = -1 EBADF (Bad file descriptor) [pid 6765] close(7) = -1 EBADF (Bad file descriptor) [pid 6765] close(8) = -1 EBADF (Bad file descriptor) [pid 6765] close(9) = -1 EBADF (Bad file descriptor) [ 179.316860][ T6766] BTRFS info (device loop0): balance: ended with status: 0 [pid 6765] close(10) = -1 EBADF (Bad file descriptor) [pid 6765] close(11) = -1 EBADF (Bad file descriptor) [pid 6765] close(12) = -1 EBADF (Bad file descriptor) [pid 6765] close(13) = -1 EBADF (Bad file descriptor) [pid 6765] close(14) = -1 EBADF (Bad file descriptor) [pid 6765] close(15) = -1 EBADF (Bad file descriptor) [pid 6765] close(16) = -1 EBADF (Bad file descriptor) [pid 6765] close(17) = -1 EBADF (Bad file descriptor) [pid 6765] close(18) = -1 EBADF (Bad file descriptor) [pid 6765] close(19) = -1 EBADF (Bad file descriptor) [pid 6765] close(20) = -1 EBADF (Bad file descriptor) [pid 6765] close(21) = -1 EBADF (Bad file descriptor) [pid 6765] close(22) = -1 EBADF (Bad file descriptor) [pid 6765] close(23) = -1 EBADF (Bad file descriptor) [pid 6765] close(24) = -1 EBADF (Bad file descriptor) [pid 6765] close(25) = -1 EBADF (Bad file descriptor) [pid 6765] close(26) = -1 EBADF (Bad file descriptor) [pid 6765] close(27) = -1 EBADF (Bad file descriptor) [pid 6765] close(28) = -1 EBADF (Bad file descriptor) [pid 6765] close(29) = -1 EBADF (Bad file descriptor) [pid 6765] exit_group(0 [pid 6784] <... futex resumed>) = ? [pid 6784] +++ exited with 0 +++ [pid 6766] <... futex resumed>) = ? [pid 6765] <... exit_group resumed>) = ? [pid 6766] +++ exited with 0 +++ [pid 6765] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=255, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./84/binderfs") = 0 [pid 5073] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./84/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./84") = 0 [pid 5073] mkdir("./85", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6785 attached , child_tidptr=0x5555570a9690) = 258 [pid 6785] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6785] chdir("./85") = 0 [pid 6785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6785] setpgid(0, 0) = 0 [pid 6785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6785] write(3, "1000", 4) = 4 [pid 6785] close(3) = 0 [pid 6785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6785] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6785] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6786 attached [pid 6786] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6786] set_robust_list(0x7f8785c4c9a0, 24 [pid 6785] <... clone3 resumed> => {parent_tid=[259]}, 88) = 259 [pid 6786] <... set_robust_list resumed>) = 0 [pid 6785] rt_sigprocmask(SIG_SETMASK, [], [pid 6786] rt_sigprocmask(SIG_SETMASK, [], [pid 6785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6786] memfd_create("syzkaller", 0 [pid 6785] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6786] <... memfd_create resumed>) = 3 [pid 6786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6786] munmap(0x7f877d82c000, 138412032) = 0 [pid 6786] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6786] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6786] close(3) = 0 [pid 6786] mkdir("./file0", 0777) = 0 [ 179.906919][ T6786] loop0: detected capacity change from 0 to 32768 [ 179.922107][ T6786] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6786) [ 179.938077][ T6786] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 179.947385][ T6786] BTRFS info (device loop0): force clearing of disk cache [ 179.954567][ T6786] BTRFS info (device loop0): setting nodatasum [ 179.960734][ T6786] BTRFS info (device loop0): allowing degraded mounts [ 179.967591][ T6786] BTRFS info (device loop0): enabling disk space caching [ 179.974642][ T6786] BTRFS info (device loop0): disk space caching is enabled [ 179.997518][ T6786] BTRFS info (device loop0): enabling ssd optimizations [ 180.004520][ T6786] BTRFS info (device loop0): auto enabling async discard [ 180.012664][ T6786] BTRFS info (device loop0): rebuilding free space tree [ 180.025957][ T6786] BTRFS info (device loop0): disabling free space tree [ 180.032856][ T6786] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6786] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6786] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6786] chdir("./file0") = 0 [pid 6786] ioctl(4, LOOP_CLR_FD) = 0 [pid 6786] close(4) = 0 [pid 6786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6785] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6786] open("./file0", O_RDONLY [pid 6785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6786] <... open resumed>) = 4 [pid 6786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 180.042536][ T6786] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.056158][ T6786] BTRFS info (device loop0): checking UUID tree [pid 6785] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6786] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6785] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] <... futex resumed>) = 0 [pid 6786] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6785] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6785] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6785] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6804 attached => {parent_tid=[260]}, 88) = 260 [pid 6804] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 6785] rt_sigprocmask(SIG_SETMASK, [], [pid 6804] <... rseq resumed>) = 0 [pid 6804] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6804] rt_sigprocmask(SIG_SETMASK, [], [pid 6785] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6785] <... futex resumed>) = 0 [pid 6804] open("./file0", O_RDONLY [pid 6785] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6804] <... open resumed>) = 5 [pid 6804] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6804] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6785] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6804] <... futex resumed>) = 0 [pid 6785] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 180.128870][ T6786] BTRFS info (device loop0): balance: start -d -m [ 180.139052][ T6786] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 180.167805][ T6786] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6804] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6804] <... ioctl resumed>) = 0 [pid 6804] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 180.337631][ T6786] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 180.362485][ T6786] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6804] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6786] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6786] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6786] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6785] close(3) = 0 [pid 6785] close(4) = 0 [pid 6785] close(5) = 0 [pid 6785] close(6) = -1 EBADF (Bad file descriptor) [pid 6785] close(7) = -1 EBADF (Bad file descriptor) [ 180.383063][ T6786] BTRFS info (device loop0): balance: ended with status: 0 [pid 6785] close(8) = -1 EBADF (Bad file descriptor) [pid 6785] close(9) = -1 EBADF (Bad file descriptor) [pid 6785] close(10) = -1 EBADF (Bad file descriptor) [pid 6785] close(11) = -1 EBADF (Bad file descriptor) [pid 6785] close(12) = -1 EBADF (Bad file descriptor) [pid 6785] close(13) = -1 EBADF (Bad file descriptor) [pid 6785] close(14) = -1 EBADF (Bad file descriptor) [pid 6785] close(15) = -1 EBADF (Bad file descriptor) [pid 6785] close(16) = -1 EBADF (Bad file descriptor) [pid 6785] close(17) = -1 EBADF (Bad file descriptor) [pid 6785] close(18) = -1 EBADF (Bad file descriptor) [pid 6785] close(19) = -1 EBADF (Bad file descriptor) [pid 6785] close(20) = -1 EBADF (Bad file descriptor) [pid 6785] close(21) = -1 EBADF (Bad file descriptor) [pid 6785] close(22) = -1 EBADF (Bad file descriptor) [pid 6785] close(23) = -1 EBADF (Bad file descriptor) [pid 6785] close(24) = -1 EBADF (Bad file descriptor) [pid 6785] close(25) = -1 EBADF (Bad file descriptor) [pid 6785] close(26) = -1 EBADF (Bad file descriptor) [pid 6785] close(27) = -1 EBADF (Bad file descriptor) [pid 6785] close(28) = -1 EBADF (Bad file descriptor) [pid 6785] close(29) = -1 EBADF (Bad file descriptor) [pid 6785] exit_group(0) = ? [pid 6786] <... futex resumed>) = ? [pid 6786] +++ exited with 0 +++ [pid 6804] <... futex resumed>) = ? [pid 6804] +++ exited with 0 +++ [pid 6785] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=258, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./85/binderfs") = 0 [pid 5073] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./85/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./85") = 0 [pid 5073] mkdir("./86", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6805 attached , child_tidptr=0x5555570a9690) = 261 [pid 6805] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6805] chdir("./86") = 0 [pid 6805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6805] setpgid(0, 0) = 0 [pid 6805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6805] write(3, "1000", 4) = 4 [pid 6805] close(3) = 0 [pid 6805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6805] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6805] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6806 attached [pid 6806] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6805] <... clone3 resumed> => {parent_tid=[262]}, 88) = 262 [pid 6806] <... rseq resumed>) = 0 [pid 6806] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6805] rt_sigprocmask(SIG_SETMASK, [], [pid 6806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... futex resumed>) = 0 [pid 6805] <... futex resumed>) = 1 [pid 6806] memfd_create("syzkaller", 0 [pid 6805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6806] <... memfd_create resumed>) = 3 [pid 6806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6806] munmap(0x7f877d82c000, 138412032) = 0 [pid 6806] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6806] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6806] close(3) = 0 [pid 6806] mkdir("./file0", 0777) = 0 [ 181.050557][ T6806] loop0: detected capacity change from 0 to 32768 [ 181.065400][ T6806] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6806) [ 181.082007][ T6806] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 181.091336][ T6806] BTRFS info (device loop0): force clearing of disk cache [ 181.098519][ T6806] BTRFS info (device loop0): setting nodatasum [ 181.104737][ T6806] BTRFS info (device loop0): allowing degraded mounts [ 181.111508][ T6806] BTRFS info (device loop0): enabling disk space caching [ 181.118586][ T6806] BTRFS info (device loop0): disk space caching is enabled [ 181.140409][ T6806] BTRFS info (device loop0): enabling ssd optimizations [ 181.147608][ T6806] BTRFS info (device loop0): auto enabling async discard [ 181.155798][ T6806] BTRFS info (device loop0): rebuilding free space tree [ 181.168549][ T6806] BTRFS info (device loop0): disabling free space tree [ 181.175495][ T6806] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.185171][ T6806] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6806] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6806] chdir("./file0") = 0 [pid 6806] ioctl(4, LOOP_CLR_FD) = 0 [pid 6806] close(4) = 0 [pid 6806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6805] <... futex resumed>) = 0 [ 181.198259][ T6806] BTRFS info (device loop0): checking UUID tree [pid 6806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6805] <... futex resumed>) = 0 [pid 6806] open("./file0", O_RDONLY [pid 6805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] <... open resumed>) = 4 [pid 6806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6805] <... futex resumed>) = 0 [pid 6806] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... ioctl resumed>) = 0 [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6805] <... futex resumed>) = 0 [pid 6806] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6805] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6805] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6805] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6824 attached => {parent_tid=[263]}, 88) = 263 [pid 6824] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6805] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6824] open("./file0", O_RDONLY) = 5 [ 181.283422][ T6806] BTRFS info (device loop0): balance: start -d -m [ 181.294370][ T6806] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 181.319081][ T6806] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6824] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6805] <... futex resumed>) = 0 [pid 6824] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6805] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6805] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6824] <... ioctl resumed>) = 0 [pid 6824] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 181.468654][ T6806] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 181.493811][ T6806] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6824] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6806] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6806] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6805] close(3) = 0 [pid 6805] close(4) = 0 [pid 6805] close(5) = 0 [pid 6805] close(6) = -1 EBADF (Bad file descriptor) [pid 6805] close(7) = -1 EBADF (Bad file descriptor) [pid 6805] close(8) = -1 EBADF (Bad file descriptor) [pid 6805] close(9) = -1 EBADF (Bad file descriptor) [pid 6805] close(10) = -1 EBADF (Bad file descriptor) [ 181.514004][ T6806] BTRFS info (device loop0): balance: ended with status: 0 [pid 6805] close(11) = -1 EBADF (Bad file descriptor) [pid 6805] close(12) = -1 EBADF (Bad file descriptor) [pid 6805] close(13) = -1 EBADF (Bad file descriptor) [pid 6805] close(14) = -1 EBADF (Bad file descriptor) [pid 6805] close(15) = -1 EBADF (Bad file descriptor) [pid 6805] close(16) = -1 EBADF (Bad file descriptor) [pid 6805] close(17) = -1 EBADF (Bad file descriptor) [pid 6805] close(18) = -1 EBADF (Bad file descriptor) [pid 6805] close(19) = -1 EBADF (Bad file descriptor) [pid 6805] close(20) = -1 EBADF (Bad file descriptor) [pid 6805] close(21) = -1 EBADF (Bad file descriptor) [pid 6805] close(22) = -1 EBADF (Bad file descriptor) [pid 6805] close(23) = -1 EBADF (Bad file descriptor) [pid 6805] close(24) = -1 EBADF (Bad file descriptor) [pid 6805] close(25) = -1 EBADF (Bad file descriptor) [pid 6805] close(26) = -1 EBADF (Bad file descriptor) [pid 6805] close(27) = -1 EBADF (Bad file descriptor) [pid 6805] close(28) = -1 EBADF (Bad file descriptor) [pid 6805] close(29) = -1 EBADF (Bad file descriptor) [pid 6805] exit_group(0 [pid 6824] <... futex resumed>) = ? [pid 6805] <... exit_group resumed>) = ? [pid 6824] +++ exited with 0 +++ [pid 6806] <... futex resumed>) = ? [pid 6806] +++ exited with 0 +++ [pid 6805] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=261, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./86/binderfs") = 0 [pid 5073] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./86/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./86") = 0 [pid 5073] mkdir("./87", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6825 attached , child_tidptr=0x5555570a9690) = 264 [pid 6825] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6825] chdir("./87") = 0 [pid 6825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6825] setpgid(0, 0) = 0 [pid 6825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6825] write(3, "1000", 4) = 4 [pid 6825] close(3) = 0 [pid 6825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6825] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6825] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6826 attached [pid 6826] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6826] set_robust_list(0x7f8785c4c9a0, 24 [pid 6825] <... clone3 resumed> => {parent_tid=[265]}, 88) = 265 [pid 6826] <... set_robust_list resumed>) = 0 [pid 6825] rt_sigprocmask(SIG_SETMASK, [], [pid 6826] rt_sigprocmask(SIG_SETMASK, [], [pid 6825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] memfd_create("syzkaller", 0 [pid 6825] <... futex resumed>) = 0 [pid 6825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6826] <... memfd_create resumed>) = 3 [pid 6826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6826] munmap(0x7f877d82c000, 138412032) = 0 [pid 6826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6826] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6826] close(3) = 0 [pid 6826] mkdir("./file0", 0777) = 0 [ 182.179046][ T6826] loop0: detected capacity change from 0 to 32768 [ 182.203038][ T6826] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6826) [ 182.219091][ T6826] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 182.228363][ T6826] BTRFS info (device loop0): force clearing of disk cache [ 182.235502][ T6826] BTRFS info (device loop0): setting nodatasum [ 182.241668][ T6826] BTRFS info (device loop0): allowing degraded mounts [ 182.248500][ T6826] BTRFS info (device loop0): enabling disk space caching [ 182.255556][ T6826] BTRFS info (device loop0): disk space caching is enabled [ 182.276639][ T6826] BTRFS info (device loop0): enabling ssd optimizations [ 182.283673][ T6826] BTRFS info (device loop0): auto enabling async discard [ 182.291918][ T6826] BTRFS info (device loop0): rebuilding free space tree [ 182.303755][ T6826] BTRFS info (device loop0): disabling free space tree [ 182.310715][ T6826] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6826] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6826] chdir("./file0") = 0 [pid 6826] ioctl(4, LOOP_CLR_FD) = 0 [pid 6826] close(4) = 0 [pid 6826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6825] <... futex resumed>) = 0 [pid 6825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] open("./file0", O_RDONLY [pid 6825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6826] <... open resumed>) = 4 [pid 6826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6825] <... futex resumed>) = 0 [pid 6825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6826] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6825] <... futex resumed>) = 0 [pid 6825] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 182.320408][ T6826] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.333648][ T6826] BTRFS info (device loop0): checking UUID tree [pid 6825] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6825] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6825] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[266]}, 88) = 266 [pid 6825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6825] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6844 attached [pid 6844] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6844] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6844] open("./file0", O_RDONLY) = 5 [pid 6844] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6825] <... futex resumed>) = 0 [pid 6844] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6825] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6825] <... futex resumed>) = 0 [pid 6844] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 182.395010][ T6826] BTRFS info (device loop0): balance: start -d -m [ 182.403260][ T6826] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 182.431408][ T6826] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6825] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6844] <... ioctl resumed>) = 0 [pid 6844] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 182.601140][ T6826] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 182.626250][ T6826] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6844] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6826] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6826] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6826] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6825] close(3) = 0 [pid 6825] close(4) = 0 [pid 6825] close(5) = 0 [ 182.645823][ T6826] BTRFS info (device loop0): balance: ended with status: 0 [pid 6825] close(6) = -1 EBADF (Bad file descriptor) [pid 6825] close(7) = -1 EBADF (Bad file descriptor) [pid 6825] close(8) = -1 EBADF (Bad file descriptor) [pid 6825] close(9) = -1 EBADF (Bad file descriptor) [pid 6825] close(10) = -1 EBADF (Bad file descriptor) [pid 6825] close(11) = -1 EBADF (Bad file descriptor) [pid 6825] close(12) = -1 EBADF (Bad file descriptor) [pid 6825] close(13) = -1 EBADF (Bad file descriptor) [pid 6825] close(14) = -1 EBADF (Bad file descriptor) [pid 6825] close(15) = -1 EBADF (Bad file descriptor) [pid 6825] close(16) = -1 EBADF (Bad file descriptor) [pid 6825] close(17) = -1 EBADF (Bad file descriptor) [pid 6825] close(18) = -1 EBADF (Bad file descriptor) [pid 6825] close(19) = -1 EBADF (Bad file descriptor) [pid 6825] close(20) = -1 EBADF (Bad file descriptor) [pid 6825] close(21) = -1 EBADF (Bad file descriptor) [pid 6825] close(22) = -1 EBADF (Bad file descriptor) [pid 6825] close(23) = -1 EBADF (Bad file descriptor) [pid 6825] close(24) = -1 EBADF (Bad file descriptor) [pid 6825] close(25) = -1 EBADF (Bad file descriptor) [pid 6825] close(26) = -1 EBADF (Bad file descriptor) [pid 6825] close(27) = -1 EBADF (Bad file descriptor) [pid 6825] close(28) = -1 EBADF (Bad file descriptor) [pid 6825] close(29) = -1 EBADF (Bad file descriptor) [pid 6825] exit_group(0 [pid 6844] <... futex resumed>) = ? [pid 6825] <... exit_group resumed>) = ? [pid 6844] +++ exited with 0 +++ [pid 6826] <... futex resumed>) = ? [pid 6826] +++ exited with 0 +++ [pid 6825] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=264, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./87/binderfs") = 0 [pid 5073] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./87/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./87") = 0 [pid 5073] mkdir("./88", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6845 attached [pid 6845] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 267 [pid 6845] <... set_robust_list resumed>) = 0 [pid 6845] chdir("./88") = 0 [pid 6845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6845] setpgid(0, 0) = 0 [pid 6845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6845] write(3, "1000", 4) = 4 [pid 6845] close(3) = 0 [pid 6845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6845] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6845] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6846 attached [pid 6846] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6845] <... clone3 resumed> => {parent_tid=[268]}, 88) = 268 [pid 6846] <... rseq resumed>) = 0 [pid 6845] rt_sigprocmask(SIG_SETMASK, [], [pid 6846] set_robust_list(0x7f8785c4c9a0, 24 [pid 6845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6846] <... set_robust_list resumed>) = 0 [pid 6845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] rt_sigprocmask(SIG_SETMASK, [], [pid 6845] <... futex resumed>) = 0 [pid 6846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6846] memfd_create("syzkaller", 0) = 3 [pid 6846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6846] munmap(0x7f877d82c000, 138412032) = 0 [pid 6846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6846] close(3) = 0 [pid 6846] mkdir("./file0", 0777) = 0 [ 183.249717][ T6846] loop0: detected capacity change from 0 to 32768 [ 183.263541][ T6846] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6846) [ 183.281034][ T6846] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 183.290600][ T6846] BTRFS info (device loop0): force clearing of disk cache [ 183.297986][ T6846] BTRFS info (device loop0): setting nodatasum [ 183.304529][ T6846] BTRFS info (device loop0): allowing degraded mounts [ 183.311299][ T6846] BTRFS info (device loop0): enabling disk space caching [ 183.318355][ T6846] BTRFS info (device loop0): disk space caching is enabled [ 183.339668][ T6846] BTRFS info (device loop0): enabling ssd optimizations [ 183.346661][ T6846] BTRFS info (device loop0): auto enabling async discard [ 183.354726][ T6846] BTRFS info (device loop0): rebuilding free space tree [ 183.367383][ T6846] BTRFS info (device loop0): disabling free space tree [ 183.374518][ T6846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.384619][ T6846] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6846] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6846] chdir("./file0") = 0 [pid 6846] ioctl(4, LOOP_CLR_FD) = 0 [pid 6846] close(4) = 0 [pid 6846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] <... futex resumed>) = 0 [ 183.398049][ T6846] BTRFS info (device loop0): checking UUID tree [pid 6845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6846] <... futex resumed>) = 0 [pid 6846] open("./file0", O_RDONLY) = 4 [pid 6846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] <... futex resumed>) = 0 [pid 6845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... futex resumed>) = 0 [pid 6845] <... futex resumed>) = 1 [pid 6846] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6846] <... ioctl resumed>) = 0 [pid 6846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6845] <... futex resumed>) = 0 [pid 6846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6845] <... futex resumed>) = 0 [pid 6846] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6845] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6845] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6845] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[269]}, 88) = 269 [pid 6845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6845] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6864 attached [pid 6864] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6864] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6864] open("./file0", O_RDONLY) = 5 [pid 6864] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6845] <... futex resumed>) = 0 [pid 6864] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6845] <... futex resumed>) = 0 [pid 6864] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 183.476702][ T6846] BTRFS info (device loop0): balance: start -d -m [ 183.486862][ T6846] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 183.511570][ T6846] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6845] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6845] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6864] <... ioctl resumed>) = 0 [pid 6864] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 183.670791][ T6846] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 183.696263][ T6846] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6864] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6846] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6846] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6846] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] close(3) = 0 [pid 6845] close(4) = 0 [pid 6845] close(5) = 0 [pid 6845] close(6) = -1 EBADF (Bad file descriptor) [pid 6845] close(7) = -1 EBADF (Bad file descriptor) [pid 6845] close(8) = -1 EBADF (Bad file descriptor) [pid 6845] close(9) = -1 EBADF (Bad file descriptor) [pid 6845] close(10) = -1 EBADF (Bad file descriptor) [pid 6845] close(11) = -1 EBADF (Bad file descriptor) [ 183.715586][ T6846] BTRFS info (device loop0): balance: ended with status: 0 [pid 6845] close(12) = -1 EBADF (Bad file descriptor) [pid 6845] close(13) = -1 EBADF (Bad file descriptor) [pid 6845] close(14) = -1 EBADF (Bad file descriptor) [pid 6845] close(15) = -1 EBADF (Bad file descriptor) [pid 6845] close(16) = -1 EBADF (Bad file descriptor) [pid 6845] close(17) = -1 EBADF (Bad file descriptor) [pid 6845] close(18) = -1 EBADF (Bad file descriptor) [pid 6845] close(19) = -1 EBADF (Bad file descriptor) [pid 6845] close(20) = -1 EBADF (Bad file descriptor) [pid 6845] close(21) = -1 EBADF (Bad file descriptor) [pid 6845] close(22) = -1 EBADF (Bad file descriptor) [pid 6845] close(23) = -1 EBADF (Bad file descriptor) [pid 6845] close(24) = -1 EBADF (Bad file descriptor) [pid 6845] close(25) = -1 EBADF (Bad file descriptor) [pid 6845] close(26) = -1 EBADF (Bad file descriptor) [pid 6845] close(27) = -1 EBADF (Bad file descriptor) [pid 6845] close(28) = -1 EBADF (Bad file descriptor) [pid 6845] close(29) = -1 EBADF (Bad file descriptor) [pid 6845] exit_group(0) = ? [pid 6864] <... futex resumed>) = ? [pid 6846] <... futex resumed>) = ? [pid 6864] +++ exited with 0 +++ [pid 6846] +++ exited with 0 +++ [pid 6845] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=267, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./88/binderfs") = 0 [pid 5073] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./88/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./88") = 0 [pid 5073] mkdir("./89", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6865 attached , child_tidptr=0x5555570a9690) = 270 [pid 6865] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6865] chdir("./89") = 0 [pid 6865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6865] setpgid(0, 0) = 0 [pid 6865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6865] write(3, "1000", 4) = 4 [pid 6865] close(3) = 0 [pid 6865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6865] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6865] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6866 attached => {parent_tid=[271]}, 88) = 271 [pid 6866] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6866] <... rseq resumed>) = 0 [pid 6866] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6866] memfd_create("syzkaller", 0) = 3 [pid 6866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6866] munmap(0x7f877d82c000, 138412032) = 0 [pid 6866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6866] close(3) = 0 [pid 6866] mkdir("./file0", 0777) = 0 [ 184.316529][ T6866] loop0: detected capacity change from 0 to 32768 [ 184.331378][ T6866] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6866) [ 184.346619][ T6866] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 184.355933][ T6866] BTRFS info (device loop0): force clearing of disk cache [ 184.363062][ T6866] BTRFS info (device loop0): setting nodatasum [ 184.369270][ T6866] BTRFS info (device loop0): allowing degraded mounts [ 184.376072][ T6866] BTRFS info (device loop0): enabling disk space caching [ 184.383095][ T6866] BTRFS info (device loop0): disk space caching is enabled [ 184.404587][ T6866] BTRFS info (device loop0): enabling ssd optimizations [ 184.411560][ T6866] BTRFS info (device loop0): auto enabling async discard [ 184.419722][ T6866] BTRFS info (device loop0): rebuilding free space tree [ 184.431870][ T6866] BTRFS info (device loop0): disabling free space tree [ 184.438883][ T6866] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.448563][ T6866] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6866] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6866] chdir("./file0") = 0 [pid 6866] ioctl(4, LOOP_CLR_FD) = 0 [pid 6866] close(4) = 0 [pid 6866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6865] <... futex resumed>) = 0 [ 184.461895][ T6866] BTRFS info (device loop0): checking UUID tree [pid 6866] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6866] open("./file0", O_RDONLY [pid 6865] <... futex resumed>) = 0 [pid 6866] <... open resumed>) = 4 [pid 6865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] <... futex resumed>) = 0 [pid 6865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6866] <... futex resumed>) = 1 [pid 6865] <... futex resumed>) = 0 [pid 6866] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] <... ioctl resumed>) = 0 [pid 6866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6865] <... futex resumed>) = 0 [pid 6866] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6865] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6866] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6865] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6865] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6865] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[272]}, 88) = 272 [pid 6865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6865] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6865] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6884 attached [pid 6884] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6884] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6884] open("./file0", O_RDONLY) = 5 [pid 6884] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6865] <... futex resumed>) = 0 [pid 6884] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6865] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6865] <... futex resumed>) = 0 [pid 6884] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 184.573212][ T6866] BTRFS info (device loop0): balance: start -d -m [ 184.581401][ T6866] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 184.612220][ T6866] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6865] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6884] <... ioctl resumed>) = 0 [pid 6884] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 184.735649][ T6866] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 184.761374][ T6866] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6884] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6866] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6866] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6866] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6865] close(3) = 0 [pid 6865] close(4) = 0 [pid 6865] close(5) = 0 [pid 6865] close(6) = -1 EBADF (Bad file descriptor) [pid 6865] close(7) = -1 EBADF (Bad file descriptor) [pid 6865] close(8) = -1 EBADF (Bad file descriptor) [pid 6865] close(9) = -1 EBADF (Bad file descriptor) [ 184.780711][ T6866] BTRFS info (device loop0): balance: ended with status: 0 [pid 6865] close(10) = -1 EBADF (Bad file descriptor) [pid 6865] close(11) = -1 EBADF (Bad file descriptor) [pid 6865] close(12) = -1 EBADF (Bad file descriptor) [pid 6865] close(13) = -1 EBADF (Bad file descriptor) [pid 6865] close(14) = -1 EBADF (Bad file descriptor) [pid 6865] close(15) = -1 EBADF (Bad file descriptor) [pid 6865] close(16) = -1 EBADF (Bad file descriptor) [pid 6865] close(17) = -1 EBADF (Bad file descriptor) [pid 6865] close(18) = -1 EBADF (Bad file descriptor) [pid 6865] close(19) = -1 EBADF (Bad file descriptor) [pid 6865] close(20) = -1 EBADF (Bad file descriptor) [pid 6865] close(21) = -1 EBADF (Bad file descriptor) [pid 6865] close(22) = -1 EBADF (Bad file descriptor) [pid 6865] close(23) = -1 EBADF (Bad file descriptor) [pid 6865] close(24) = -1 EBADF (Bad file descriptor) [pid 6865] close(25) = -1 EBADF (Bad file descriptor) [pid 6865] close(26) = -1 EBADF (Bad file descriptor) [pid 6865] close(27) = -1 EBADF (Bad file descriptor) [pid 6865] close(28) = -1 EBADF (Bad file descriptor) [pid 6865] close(29) = -1 EBADF (Bad file descriptor) [pid 6865] exit_group(0 [pid 6884] <... futex resumed>) = ? [pid 6866] <... futex resumed>) = ? [pid 6865] <... exit_group resumed>) = ? [pid 6884] +++ exited with 0 +++ [pid 6866] +++ exited with 0 +++ [pid 6865] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=270, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=37 /* 0.37 s */} --- [pid 5073] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./89/binderfs") = 0 [pid 5073] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./89/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./89") = 0 [pid 5073] mkdir("./90", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6885 attached , child_tidptr=0x5555570a9690) = 273 [pid 6885] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6885] chdir("./90") = 0 [pid 6885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6885] setpgid(0, 0) = 0 [pid 6885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6885] write(3, "1000", 4) = 4 [pid 6885] close(3) = 0 [pid 6885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6885] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6885] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6886 attached [pid 6886] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6885] <... clone3 resumed> => {parent_tid=[274]}, 88) = 274 [pid 6886] <... rseq resumed>) = 0 [pid 6885] rt_sigprocmask(SIG_SETMASK, [], [pid 6886] set_robust_list(0x7f8785c4c9a0, 24 [pid 6885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6886] <... set_robust_list resumed>) = 0 [pid 6886] rt_sigprocmask(SIG_SETMASK, [], [pid 6885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6885] <... futex resumed>) = 0 [pid 6886] memfd_create("syzkaller", 0 [pid 6885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6886] <... memfd_create resumed>) = 3 [pid 6886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6886] munmap(0x7f877d82c000, 138412032) = 0 [pid 6886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6886] close(3) = 0 [pid 6886] mkdir("./file0", 0777) = 0 [ 185.382061][ T6886] loop0: detected capacity change from 0 to 32768 [ 185.406300][ T6886] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6886) [ 185.423808][ T6886] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.433134][ T6886] BTRFS info (device loop0): force clearing of disk cache [ 185.440476][ T6886] BTRFS info (device loop0): setting nodatasum [ 185.446699][ T6886] BTRFS info (device loop0): allowing degraded mounts [ 185.453662][ T6886] BTRFS info (device loop0): enabling disk space caching [ 185.461228][ T6886] BTRFS info (device loop0): disk space caching is enabled [ 185.483120][ T6886] BTRFS info (device loop0): enabling ssd optimizations [ 185.490256][ T6886] BTRFS info (device loop0): auto enabling async discard [ 185.498769][ T6886] BTRFS info (device loop0): rebuilding free space tree [ 185.511742][ T6886] BTRFS info (device loop0): disabling free space tree [ 185.518832][ T6886] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6886] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6886] chdir("./file0") = 0 [pid 6886] ioctl(4, LOOP_CLR_FD) = 0 [pid 6886] close(4) = 0 [pid 6886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6886] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6885] <... futex resumed>) = 0 [pid 6885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6886] <... futex resumed>) = 0 [pid 6886] open("./file0", O_RDONLY [pid 6885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6886] <... open resumed>) = 4 [pid 6886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6885] <... futex resumed>) = 0 [pid 6886] <... futex resumed>) = 1 [pid 6885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6885] <... futex resumed>) = 0 [pid 6886] <... ioctl resumed>) = 0 [ 185.528517][ T6886] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.541492][ T6886] BTRFS info (device loop0): checking UUID tree [pid 6885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6886] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6885] <... futex resumed>) = 0 [pid 6885] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6885] <... futex resumed>) = 0 [pid 6886] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 185.617361][ T6886] BTRFS info (device loop0): balance: start -d -m [ 185.626478][ T6886] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6885] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6885] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6885] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[275]}, 88) = 275 [pid 6885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6885] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6885] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6904 attached [pid 6904] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6904] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6904] open("./file0", O_RDONLY) = 5 [pid 6904] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6885] <... futex resumed>) = 0 [pid 6904] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6885] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6885] <... futex resumed>) = 0 [pid 6904] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 185.658590][ T6886] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6885] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6904] <... ioctl resumed>) = 0 [pid 6904] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 185.799463][ T6886] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 185.823072][ T6886] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 6904] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6886] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6886] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6886] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6885] close(3) = 0 [pid 6885] close(4) = 0 [pid 6885] close(5) = 0 [pid 6885] close(6) = -1 EBADF (Bad file descriptor) [pid 6885] close(7) = -1 EBADF (Bad file descriptor) [pid 6885] close(8) = -1 EBADF (Bad file descriptor) [pid 6885] close(9) = -1 EBADF (Bad file descriptor) [pid 6885] close(10) = -1 EBADF (Bad file descriptor) [pid 6885] close(11) = -1 EBADF (Bad file descriptor) [pid 6885] close(12) = -1 EBADF (Bad file descriptor) [ 185.842954][ T6886] BTRFS info (device loop0): balance: ended with status: 0 [pid 6885] close(13) = -1 EBADF (Bad file descriptor) [pid 6885] close(14) = -1 EBADF (Bad file descriptor) [pid 6885] close(15) = -1 EBADF (Bad file descriptor) [pid 6885] close(16) = -1 EBADF (Bad file descriptor) [pid 6885] close(17) = -1 EBADF (Bad file descriptor) [pid 6885] close(18) = -1 EBADF (Bad file descriptor) [pid 6885] close(19) = -1 EBADF (Bad file descriptor) [pid 6885] close(20) = -1 EBADF (Bad file descriptor) [pid 6885] close(21) = -1 EBADF (Bad file descriptor) [pid 6885] close(22) = -1 EBADF (Bad file descriptor) [pid 6885] close(23) = -1 EBADF (Bad file descriptor) [pid 6885] close(24) = -1 EBADF (Bad file descriptor) [pid 6885] close(25) = -1 EBADF (Bad file descriptor) [pid 6885] close(26) = -1 EBADF (Bad file descriptor) [pid 6885] close(27) = -1 EBADF (Bad file descriptor) [pid 6885] close(28) = -1 EBADF (Bad file descriptor) [pid 6885] close(29) = -1 EBADF (Bad file descriptor) [pid 6885] exit_group(0) = ? [pid 6904] <... futex resumed>) = ? [pid 6886] <... futex resumed>) = ? [pid 6904] +++ exited with 0 +++ [pid 6886] +++ exited with 0 +++ [pid 6885] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=273, si_uid=0, si_status=0, si_utime=0, si_stime=45 /* 0.45 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./90/binderfs") = 0 [pid 5073] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./90/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./90") = 0 [pid 5073] mkdir("./91", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6905 attached , child_tidptr=0x5555570a9690) = 276 [pid 6905] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6905] chdir("./91") = 0 [pid 6905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6905] setpgid(0, 0) = 0 [pid 6905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6905] write(3, "1000", 4) = 4 [pid 6905] close(3) = 0 [pid 6905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6905] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6905] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6906 attached [pid 6906] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6905] <... clone3 resumed> => {parent_tid=[277]}, 88) = 277 [pid 6906] <... rseq resumed>) = 0 [pid 6905] rt_sigprocmask(SIG_SETMASK, [], [pid 6906] set_robust_list(0x7f8785c4c9a0, 24 [pid 6905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6906] <... set_robust_list resumed>) = 0 [pid 6905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6906] rt_sigprocmask(SIG_SETMASK, [], [pid 6905] <... futex resumed>) = 0 [pid 6906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6906] memfd_create("syzkaller", 0) = 3 [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6906] munmap(0x7f877d82c000, 138412032) = 0 [pid 6906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6906] close(3) = 0 [pid 6906] mkdir("./file0", 0777) = 0 [ 186.418982][ T6906] loop0: detected capacity change from 0 to 32768 [ 186.432852][ T6906] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6906) [ 186.448891][ T6906] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 186.458230][ T6906] BTRFS info (device loop0): force clearing of disk cache [ 186.465406][ T6906] BTRFS info (device loop0): setting nodatasum [ 186.471589][ T6906] BTRFS info (device loop0): allowing degraded mounts [ 186.478404][ T6906] BTRFS info (device loop0): enabling disk space caching [ 186.485469][ T6906] BTRFS info (device loop0): disk space caching is enabled [ 186.509507][ T6906] BTRFS info (device loop0): enabling ssd optimizations [ 186.516565][ T6906] BTRFS info (device loop0): auto enabling async discard [ 186.524601][ T6906] BTRFS info (device loop0): rebuilding free space tree [ 186.536639][ T6906] BTRFS info (device loop0): disabling free space tree [ 186.543521][ T6906] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6906] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6906] chdir("./file0") = 0 [pid 6906] ioctl(4, LOOP_CLR_FD) = 0 [pid 6906] close(4) = 0 [pid 6906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] <... futex resumed>) = 0 [pid 6905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6906] <... futex resumed>) = 1 [pid 6905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6906] open("./file0", O_RDONLY) = 4 [pid 6906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6905] <... futex resumed>) = 0 [pid 6906] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6906] <... ioctl resumed>) = 0 [pid 6905] <... futex resumed>) = 0 [pid 6905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] <... futex resumed>) = 0 [pid 6906] <... futex resumed>) = 1 [pid 6905] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6906] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6905] <... futex resumed>) = 0 [ 186.553229][ T6906] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.566351][ T6906] BTRFS info (device loop0): checking UUID tree [pid 6905] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6905] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6905] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6924 attached [pid 6924] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6924] set_robust_list(0x7f8785c2b9a0, 24 [pid 6905] <... clone3 resumed> => {parent_tid=[278]}, 88) = 278 [pid 6924] <... set_robust_list resumed>) = 0 [pid 6905] rt_sigprocmask(SIG_SETMASK, [], [pid 6924] rt_sigprocmask(SIG_SETMASK, [], [pid 6905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6905] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6905] <... futex resumed>) = 0 [pid 6924] open("./file0", O_RDONLY [pid 6905] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6924] <... open resumed>) = 5 [pid 6924] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6924] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6905] <... futex resumed>) = 0 [pid 6905] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6924] <... futex resumed>) = 0 [pid 6905] <... futex resumed>) = 1 [pid 6924] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 186.603746][ T6906] BTRFS info (device loop0): balance: start -d -m [ 186.613393][ T6906] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 186.637134][ T6906] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6905] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 186.725403][ T6906] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6924] <... ioctl resumed>) = 0 [pid 6924] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6906] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6906] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6906] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6905] close(3) = 0 [pid 6905] close(4) = 0 [pid 6905] close(5) = 0 [pid 6905] close(6) = -1 EBADF (Bad file descriptor) [pid 6905] close(7) = -1 EBADF (Bad file descriptor) [pid 6905] close(8) = -1 EBADF (Bad file descriptor) [pid 6905] close(9) = -1 EBADF (Bad file descriptor) [pid 6905] close(10) = -1 EBADF (Bad file descriptor) [pid 6905] close(11) = -1 EBADF (Bad file descriptor) [pid 6905] close(12) = -1 EBADF (Bad file descriptor) [pid 6905] close(13) = -1 EBADF (Bad file descriptor) [pid 6905] close(14) = -1 EBADF (Bad file descriptor) [pid 6905] close(15) = -1 EBADF (Bad file descriptor) [pid 6905] close(16) = -1 EBADF (Bad file descriptor) [ 186.840300][ T6906] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 186.860925][ T6906] BTRFS info (device loop0): balance: ended with status: 0 [pid 6905] close(17) = -1 EBADF (Bad file descriptor) [pid 6905] close(18) = -1 EBADF (Bad file descriptor) [pid 6905] close(19) = -1 EBADF (Bad file descriptor) [pid 6905] close(20) = -1 EBADF (Bad file descriptor) [pid 6905] close(21) = -1 EBADF (Bad file descriptor) [pid 6905] close(22) = -1 EBADF (Bad file descriptor) [pid 6905] close(23) = -1 EBADF (Bad file descriptor) [pid 6905] close(24) = -1 EBADF (Bad file descriptor) [pid 6905] close(25) = -1 EBADF (Bad file descriptor) [pid 6905] close(26) = -1 EBADF (Bad file descriptor) [pid 6905] close(27) = -1 EBADF (Bad file descriptor) [pid 6905] close(28) = -1 EBADF (Bad file descriptor) [pid 6905] close(29) = -1 EBADF (Bad file descriptor) [pid 6905] exit_group(0 [pid 6924] <... futex resumed>) = ? [pid 6924] +++ exited with 0 +++ [pid 6906] <... futex resumed>) = ? [pid 6905] <... exit_group resumed>) = ? [pid 6906] +++ exited with 0 +++ [pid 6905] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=276, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5073] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./91/binderfs") = 0 [pid 5073] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./91/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./91") = 0 [pid 5073] mkdir("./92", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6925 attached [pid 6925] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 279 [pid 6925] <... set_robust_list resumed>) = 0 [pid 6925] chdir("./92") = 0 [pid 6925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6925] setpgid(0, 0) = 0 [pid 6925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6925] write(3, "1000", 4) = 4 [pid 6925] close(3) = 0 [pid 6925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6925] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6925] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6926 attached => {parent_tid=[280]}, 88) = 280 [pid 6926] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6926] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6925] rt_sigprocmask(SIG_SETMASK, [], [pid 6926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] <... futex resumed>) = 0 [pid 6925] <... futex resumed>) = 1 [pid 6925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6926] memfd_create("syzkaller", 0) = 3 [pid 6926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6926] munmap(0x7f877d82c000, 138412032) = 0 [pid 6926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6926] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6926] close(3) = 0 [pid 6926] mkdir("./file0", 0777) = 0 [ 187.495749][ T6926] loop0: detected capacity change from 0 to 32768 [ 187.510295][ T6926] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6926) [ 187.528722][ T6926] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 187.538034][ T6926] BTRFS info (device loop0): force clearing of disk cache [ 187.545197][ T6926] BTRFS info (device loop0): setting nodatasum [ 187.551360][ T6926] BTRFS info (device loop0): allowing degraded mounts [ 187.558177][ T6926] BTRFS info (device loop0): enabling disk space caching [ 187.565224][ T6926] BTRFS info (device loop0): disk space caching is enabled [ 187.586484][ T6926] BTRFS info (device loop0): enabling ssd optimizations [ 187.593447][ T6926] BTRFS info (device loop0): auto enabling async discard [ 187.601994][ T6926] BTRFS info (device loop0): rebuilding free space tree [ 187.613827][ T6926] BTRFS info (device loop0): disabling free space tree [ 187.620841][ T6926] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.630523][ T6926] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6926] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6926] chdir("./file0") = 0 [pid 6926] ioctl(4, LOOP_CLR_FD) = 0 [pid 6926] close(4) = 0 [ 187.644233][ T6926] BTRFS info (device loop0): checking UUID tree [pid 6926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6925] <... futex resumed>) = 0 [pid 6926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6926] open("./file0", O_RDONLY [pid 6925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... open resumed>) = 4 [pid 6926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6925] <... futex resumed>) = 0 [pid 6926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] <... futex resumed>) = 0 [pid 6925] <... futex resumed>) = 1 [pid 6926] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6925] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] <... futex resumed>) = 0 [pid 6925] <... futex resumed>) = 1 [pid 6926] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6925] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6925] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6925] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 6944 attached => {parent_tid=[281]}, 88) = 281 [pid 6925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6925] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6925] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6944] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [ 187.736042][ T6926] BTRFS info (device loop0): balance: start -d -m [ 187.745689][ T6926] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 187.774263][ T6926] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6944] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6944] open("./file0", O_RDONLY) = 5 [pid 6944] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6944] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] <... futex resumed>) = 0 [pid 6925] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6925] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6944] <... futex resumed>) = 0 [pid 6944] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6925] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 187.830892][ T6926] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6944] <... ioctl resumed>) = 0 [pid 6944] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6926] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6926] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] close(3) = 0 [pid 6926] <... futex resumed>) = 0 [pid 6926] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] close(4) = 0 [pid 6925] close(5) = 0 [pid 6925] close(6) = -1 EBADF (Bad file descriptor) [pid 6925] close(7) = -1 EBADF (Bad file descriptor) [pid 6925] close(8) = -1 EBADF (Bad file descriptor) [pid 6925] close(9) = -1 EBADF (Bad file descriptor) [pid 6925] close(10) = -1 EBADF (Bad file descriptor) [pid 6925] close(11) = -1 EBADF (Bad file descriptor) [ 187.942905][ T6926] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 187.962719][ T6926] BTRFS info (device loop0): balance: ended with status: 0 [pid 6925] close(12) = -1 EBADF (Bad file descriptor) [pid 6925] close(13) = -1 EBADF (Bad file descriptor) [pid 6925] close(14) = -1 EBADF (Bad file descriptor) [pid 6925] close(15) = -1 EBADF (Bad file descriptor) [pid 6925] close(16) = -1 EBADF (Bad file descriptor) [pid 6925] close(17) = -1 EBADF (Bad file descriptor) [pid 6925] close(18) = -1 EBADF (Bad file descriptor) [pid 6925] close(19) = -1 EBADF (Bad file descriptor) [pid 6925] close(20) = -1 EBADF (Bad file descriptor) [pid 6925] close(21) = -1 EBADF (Bad file descriptor) [pid 6925] close(22) = -1 EBADF (Bad file descriptor) [pid 6925] close(23) = -1 EBADF (Bad file descriptor) [pid 6925] close(24) = -1 EBADF (Bad file descriptor) [pid 6925] close(25) = -1 EBADF (Bad file descriptor) [pid 6925] close(26) = -1 EBADF (Bad file descriptor) [pid 6925] close(27) = -1 EBADF (Bad file descriptor) [pid 6925] close(28) = -1 EBADF (Bad file descriptor) [pid 6925] close(29) = -1 EBADF (Bad file descriptor) [pid 6925] exit_group(0) = ? [pid 6926] <... futex resumed>) = ? [pid 6944] <... futex resumed>) = ? [pid 6926] +++ exited with 0 +++ [pid 6944] +++ exited with 0 +++ [pid 6925] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=279, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./92/binderfs") = 0 [pid 5073] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./92/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./92") = 0 [pid 5073] mkdir("./93", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6945 attached , child_tidptr=0x5555570a9690) = 282 [pid 6945] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6945] chdir("./93") = 0 [pid 6945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6945] setpgid(0, 0) = 0 [pid 6945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6945] write(3, "1000", 4) = 4 [pid 6945] close(3) = 0 [pid 6945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6945] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6945] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6946 attached => {parent_tid=[283]}, 88) = 283 [pid 6946] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6946] <... rseq resumed>) = 0 [pid 6946] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 6946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6946] memfd_create("syzkaller", 0) = 3 [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6946] munmap(0x7f877d82c000, 138412032) = 0 [pid 6946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6946] close(3) = 0 [pid 6946] mkdir("./file0", 0777) = 0 [ 188.510466][ T6946] loop0: detected capacity change from 0 to 32768 [ 188.527126][ T6946] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6946) [ 188.543058][ T6946] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 188.552455][ T6946] BTRFS info (device loop0): force clearing of disk cache [ 188.559612][ T6946] BTRFS info (device loop0): setting nodatasum [ 188.565838][ T6946] BTRFS info (device loop0): allowing degraded mounts [ 188.572616][ T6946] BTRFS info (device loop0): enabling disk space caching [ 188.579998][ T6946] BTRFS info (device loop0): disk space caching is enabled [ 188.601506][ T6946] BTRFS info (device loop0): enabling ssd optimizations [ 188.608609][ T6946] BTRFS info (device loop0): auto enabling async discard [ 188.616661][ T6946] BTRFS info (device loop0): rebuilding free space tree [ 188.629334][ T6946] BTRFS info (device loop0): disabling free space tree [ 188.636424][ T6946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.646120][ T6946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6946] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6946] chdir("./file0") = 0 [pid 6946] ioctl(4, LOOP_CLR_FD) = 0 [pid 6946] close(4) = 0 [pid 6946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6945] <... futex resumed>) = 0 [ 188.659416][ T6946] BTRFS info (device loop0): checking UUID tree [pid 6945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] <... futex resumed>) = 0 [pid 6945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6946] open("./file0", O_RDONLY) = 4 [pid 6946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6945] <... futex resumed>) = 0 [pid 6945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6946] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 6945] <... futex resumed>) = 0 [pid 6945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6946] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6945] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6946] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6945] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6945] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6945] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[284]}, 88) = 284 ./strace-static-x86_64: Process 6964 attached [pid 6964] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6945] rt_sigprocmask(SIG_SETMASK, [], [pid 6964] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 6945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6964] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6945] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] open("./file0", O_RDONLY) = 5 [pid 6945] <... futex resumed>) = 0 [pid 6964] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6945] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6964] <... futex resumed>) = 0 [pid 6945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6945] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 188.733444][ T6946] BTRFS info (device loop0): balance: start -d -m [ 188.745289][ T6946] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 188.772487][ T6946] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6964] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6945] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6964] <... ioctl resumed>) = 0 [pid 6964] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 188.870780][ T6946] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6964] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6946] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6946] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6945] close(3 [pid 6946] <... futex resumed>) = 0 [pid 6945] <... close resumed>) = 0 [pid 6946] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6945] close(4) = 0 [pid 6945] close(5) = 0 [pid 6945] close(6) = -1 EBADF (Bad file descriptor) [pid 6945] close(7) = -1 EBADF (Bad file descriptor) [pid 6945] close(8) = -1 EBADF (Bad file descriptor) [pid 6945] close(9) = -1 EBADF (Bad file descriptor) [pid 6945] close(10) = -1 EBADF (Bad file descriptor) [pid 6945] close(11) = -1 EBADF (Bad file descriptor) [ 188.939707][ T6946] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 188.959079][ T6946] BTRFS info (device loop0): balance: ended with status: 0 [pid 6945] close(12) = -1 EBADF (Bad file descriptor) [pid 6945] close(13) = -1 EBADF (Bad file descriptor) [pid 6945] close(14) = -1 EBADF (Bad file descriptor) [pid 6945] close(15) = -1 EBADF (Bad file descriptor) [pid 6945] close(16) = -1 EBADF (Bad file descriptor) [pid 6945] close(17) = -1 EBADF (Bad file descriptor) [pid 6945] close(18) = -1 EBADF (Bad file descriptor) [pid 6945] close(19) = -1 EBADF (Bad file descriptor) [pid 6945] close(20) = -1 EBADF (Bad file descriptor) [pid 6945] close(21) = -1 EBADF (Bad file descriptor) [pid 6945] close(22) = -1 EBADF (Bad file descriptor) [pid 6945] close(23) = -1 EBADF (Bad file descriptor) [pid 6945] close(24) = -1 EBADF (Bad file descriptor) [pid 6945] close(25) = -1 EBADF (Bad file descriptor) [pid 6945] close(26) = -1 EBADF (Bad file descriptor) [pid 6945] close(27) = -1 EBADF (Bad file descriptor) [pid 6945] close(28) = -1 EBADF (Bad file descriptor) [pid 6945] close(29) = -1 EBADF (Bad file descriptor) [pid 6945] exit_group(0 [pid 6946] <... futex resumed>) = ? [pid 6964] <... futex resumed>) = ? [pid 6945] <... exit_group resumed>) = ? [pid 6964] +++ exited with 0 +++ [pid 6946] +++ exited with 0 +++ [pid 6945] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=282, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./93/binderfs") = 0 [pid 5073] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./93/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./93") = 0 [pid 5073] mkdir("./94", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6965 attached , child_tidptr=0x5555570a9690) = 285 [pid 6965] set_robust_list(0x5555570a96a0, 24) = 0 [pid 6965] chdir("./94") = 0 [pid 6965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6965] setpgid(0, 0) = 0 [pid 6965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6965] write(3, "1000", 4) = 4 [pid 6965] close(3) = 0 [pid 6965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6965] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6965] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6966 attached [pid 6966] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 6965] <... clone3 resumed> => {parent_tid=[286]}, 88) = 286 [pid 6966] <... rseq resumed>) = 0 [pid 6965] rt_sigprocmask(SIG_SETMASK, [], [pid 6966] set_robust_list(0x7f8785c4c9a0, 24 [pid 6965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6966] <... set_robust_list resumed>) = 0 [pid 6965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6965] <... futex resumed>) = 0 [pid 6966] memfd_create("syzkaller", 0 [pid 6965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6966] <... memfd_create resumed>) = 3 [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6966] munmap(0x7f877d82c000, 138412032) = 0 [pid 6966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6966] close(3) = 0 [pid 6966] mkdir("./file0", 0777) = 0 [ 189.616918][ T6966] loop0: detected capacity change from 0 to 32768 [ 189.641004][ T6966] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6966) [ 189.657543][ T6966] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 189.666816][ T6966] BTRFS info (device loop0): force clearing of disk cache [ 189.673982][ T6966] BTRFS info (device loop0): setting nodatasum [ 189.680150][ T6966] BTRFS info (device loop0): allowing degraded mounts [ 189.686962][ T6966] BTRFS info (device loop0): enabling disk space caching [ 189.694050][ T6966] BTRFS info (device loop0): disk space caching is enabled [ 189.715708][ T6966] BTRFS info (device loop0): enabling ssd optimizations [ 189.722852][ T6966] BTRFS info (device loop0): auto enabling async discard [ 189.731060][ T6966] BTRFS info (device loop0): rebuilding free space tree [ 189.743324][ T6966] BTRFS info (device loop0): disabling free space tree [ 189.750300][ T6966] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 6966] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6966] chdir("./file0") = 0 [pid 6966] ioctl(4, LOOP_CLR_FD) = 0 [pid 6966] close(4) = 0 [pid 6966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6965] <... futex resumed>) = 0 [pid 6966] open("./file0", O_RDONLY [pid 6965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6966] <... open resumed>) = 4 [pid 6966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6965] <... futex resumed>) = 0 [pid 6965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6965] <... futex resumed>) = 0 [pid 6966] <... ioctl resumed>) = 0 [pid 6965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 189.759981][ T6966] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.773417][ T6966] BTRFS info (device loop0): checking UUID tree [pid 6966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6965] <... futex resumed>) = 0 [pid 6965] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6966] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6965] <... futex resumed>) = 0 [pid 6965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6965] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6965] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6965] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[287]}, 88) = 287 [pid 6965] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6965] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6984 attached ) = 0 [pid 6984] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 6984] set_robust_list(0x7f8785c2b9a0, 24 [pid 6965] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6984] <... set_robust_list resumed>) = 0 [pid 6984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6984] open("./file0", O_RDONLY) = 5 [pid 6984] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6965] <... futex resumed>) = 0 [pid 6984] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [ 189.832710][ T6966] BTRFS info (device loop0): balance: start -d -m [ 189.842565][ T6966] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 189.867555][ T6966] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 6965] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6965] <... futex resumed>) = 0 [pid 6984] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6965] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 189.967000][ T6966] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 6984] <... ioctl resumed>) = 0 [pid 6984] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6966] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6966] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6966] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6965] close(3) = 0 [pid 6965] close(4) = 0 [pid 6965] close(5) = 0 [pid 6965] close(6) = -1 EBADF (Bad file descriptor) [pid 6965] close(7) = -1 EBADF (Bad file descriptor) [pid 6965] close(8) = -1 EBADF (Bad file descriptor) [pid 6965] close(9) = -1 EBADF (Bad file descriptor) [pid 6965] close(10) = -1 EBADF (Bad file descriptor) [pid 6965] close(11) = -1 EBADF (Bad file descriptor) [pid 6965] close(12) = -1 EBADF (Bad file descriptor) [pid 6965] close(13) = -1 EBADF (Bad file descriptor) [pid 6965] close(14) = -1 EBADF (Bad file descriptor) [pid 6965] close(15) = -1 EBADF (Bad file descriptor) [pid 6965] close(16) = -1 EBADF (Bad file descriptor) [pid 6965] close(17) = -1 EBADF (Bad file descriptor) [ 190.067086][ T6966] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 190.086594][ T6966] BTRFS info (device loop0): balance: ended with status: 0 [pid 6965] close(18) = -1 EBADF (Bad file descriptor) [pid 6965] close(19) = -1 EBADF (Bad file descriptor) [pid 6965] close(20) = -1 EBADF (Bad file descriptor) [pid 6965] close(21) = -1 EBADF (Bad file descriptor) [pid 6965] close(22) = -1 EBADF (Bad file descriptor) [pid 6965] close(23) = -1 EBADF (Bad file descriptor) [pid 6965] close(24) = -1 EBADF (Bad file descriptor) [pid 6965] close(25) = -1 EBADF (Bad file descriptor) [pid 6965] close(26) = -1 EBADF (Bad file descriptor) [pid 6965] close(27) = -1 EBADF (Bad file descriptor) [pid 6965] close(28) = -1 EBADF (Bad file descriptor) [pid 6965] close(29) = -1 EBADF (Bad file descriptor) [pid 6965] exit_group(0 [pid 6984] <... futex resumed>) = ? [pid 6966] <... futex resumed>) = ? [pid 6965] <... exit_group resumed>) = ? [pid 6984] +++ exited with 0 +++ [pid 6966] +++ exited with 0 +++ [pid 6965] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=285, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./94/binderfs") = 0 [pid 5073] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./94/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./94") = 0 [pid 5073] mkdir("./95", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6985 attached [pid 6985] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 288 [pid 6985] <... set_robust_list resumed>) = 0 [pid 6985] chdir("./95") = 0 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6985] setpgid(0, 0) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6985] write(3, "1000", 4) = 4 [pid 6985] close(3) = 0 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6985] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 6985] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 6986 attached [pid 6986] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 6986] set_robust_list(0x7f8785c4c9a0, 24 [pid 6985] <... clone3 resumed> => {parent_tid=[289]}, 88) = 289 [pid 6986] <... set_robust_list resumed>) = 0 [pid 6985] rt_sigprocmask(SIG_SETMASK, [], [pid 6986] rt_sigprocmask(SIG_SETMASK, [], [pid 6985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6986] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] memfd_create("syzkaller", 0 [pid 6985] <... futex resumed>) = 0 [pid 6985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6986] <... memfd_create resumed>) = 3 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 6986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6986] munmap(0x7f877d82c000, 138412032) = 0 [pid 6986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6986] close(3) = 0 [pid 6986] mkdir("./file0", 0777) = 0 [ 190.679342][ T6986] loop0: detected capacity change from 0 to 32768 [ 190.693645][ T6986] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (6986) [ 190.708916][ T6986] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.718212][ T6986] BTRFS info (device loop0): force clearing of disk cache [ 190.725381][ T6986] BTRFS info (device loop0): setting nodatasum [ 190.731539][ T6986] BTRFS info (device loop0): allowing degraded mounts [ 190.738337][ T6986] BTRFS info (device loop0): enabling disk space caching [ 190.745399][ T6986] BTRFS info (device loop0): disk space caching is enabled [ 190.767543][ T6986] BTRFS info (device loop0): enabling ssd optimizations [ 190.774554][ T6986] BTRFS info (device loop0): auto enabling async discard [ 190.782361][ T6986] BTRFS info (device loop0): rebuilding free space tree [ 190.794481][ T6986] BTRFS info (device loop0): disabling free space tree [ 190.801394][ T6986] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.811395][ T6986] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 6986] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 6986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6986] chdir("./file0") = 0 [pid 6986] ioctl(4, LOOP_CLR_FD) = 0 [pid 6986] close(4) = 0 [pid 6986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 6985] <... futex resumed>) = 0 [pid 6985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6986] open("./file0", O_RDONLY [pid 6985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6986] <... open resumed>) = 4 [pid 6986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6985] <... futex resumed>) = 0 [pid 6986] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 6985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6986] <... ioctl resumed>) = 0 [ 190.825073][ T6986] BTRFS info (device loop0): checking UUID tree [pid 6986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6985] <... futex resumed>) = 0 [pid 6986] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 190.885879][ T6986] BTRFS info (device loop0): balance: start -d -m [ 190.897915][ T6986] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 6985] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6985] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 6985] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[290]}, 88) = 290 [pid 6985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6985] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7004 attached [pid 7004] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7004] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7004] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7004] open("./file0", O_RDONLY) = 5 [pid 7004] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6985] <... futex resumed>) = 0 [pid 6985] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 190.928961][ T6986] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7004] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 6985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7004] <... ioctl resumed>) = 0 [pid 7004] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 191.099015][ T6986] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 191.125180][ T6986] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7004] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6986] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] close(3) = 0 [pid 6985] close(4) = 0 [pid 6985] close(5) = 0 [pid 6985] close(6) = -1 EBADF (Bad file descriptor) [pid 6985] close(7) = -1 EBADF (Bad file descriptor) [pid 6985] close(8) = -1 EBADF (Bad file descriptor) [pid 6985] close(9) = -1 EBADF (Bad file descriptor) [pid 6985] close(10) = -1 EBADF (Bad file descriptor) [ 191.144954][ T6986] BTRFS info (device loop0): balance: ended with status: 0 [pid 6985] close(11) = -1 EBADF (Bad file descriptor) [pid 6985] close(12) = -1 EBADF (Bad file descriptor) [pid 6985] close(13) = -1 EBADF (Bad file descriptor) [pid 6985] close(14) = -1 EBADF (Bad file descriptor) [pid 6985] close(15) = -1 EBADF (Bad file descriptor) [pid 6985] close(16) = -1 EBADF (Bad file descriptor) [pid 6985] close(17) = -1 EBADF (Bad file descriptor) [pid 6985] close(18) = -1 EBADF (Bad file descriptor) [pid 6985] close(19) = -1 EBADF (Bad file descriptor) [pid 6985] close(20) = -1 EBADF (Bad file descriptor) [pid 6985] close(21) = -1 EBADF (Bad file descriptor) [pid 6985] close(22) = -1 EBADF (Bad file descriptor) [pid 6985] close(23) = -1 EBADF (Bad file descriptor) [pid 6985] close(24) = -1 EBADF (Bad file descriptor) [pid 6985] close(25) = -1 EBADF (Bad file descriptor) [pid 6985] close(26) = -1 EBADF (Bad file descriptor) [pid 6985] close(27) = -1 EBADF (Bad file descriptor) [pid 6985] close(28) = -1 EBADF (Bad file descriptor) [pid 6985] close(29) = -1 EBADF (Bad file descriptor) [pid 6985] exit_group(0 [pid 7004] <... futex resumed>) = ? [pid 6986] <... futex resumed>) = ? [pid 6985] <... exit_group resumed>) = ? [pid 7004] +++ exited with 0 +++ [pid 6986] +++ exited with 0 +++ [pid 6985] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=288, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=46 /* 0.46 s */} --- [pid 5073] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./95/binderfs") = 0 [pid 5073] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./95/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./95") = 0 [pid 5073] mkdir("./96", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7005 attached , child_tidptr=0x5555570a9690) = 291 [pid 7005] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7005] chdir("./96") = 0 [pid 7005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7005] setpgid(0, 0) = 0 [pid 7005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7005] write(3, "1000", 4) = 4 [pid 7005] close(3) = 0 [pid 7005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7005] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7005] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7005] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7005] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7006 attached [pid 7006] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7005] <... clone3 resumed> => {parent_tid=[292]}, 88) = 292 [pid 7006] <... rseq resumed>) = 0 [pid 7005] rt_sigprocmask(SIG_SETMASK, [], [pid 7006] set_robust_list(0x7f8785c4c9a0, 24 [pid 7005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7006] <... set_robust_list resumed>) = 0 [pid 7006] rt_sigprocmask(SIG_SETMASK, [], [pid 7005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7005] <... futex resumed>) = 0 [pid 7006] memfd_create("syzkaller", 0 [pid 7005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7006] <... memfd_create resumed>) = 3 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7006] munmap(0x7f877d82c000, 138412032) = 0 [pid 7006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7006] close(3) = 0 [pid 7006] mkdir("./file0", 0777) = 0 [ 191.745771][ T7006] loop0: detected capacity change from 0 to 32768 [ 191.767560][ T7006] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7006) [ 191.783346][ T7006] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 191.792634][ T7006] BTRFS info (device loop0): force clearing of disk cache [ 191.799802][ T7006] BTRFS info (device loop0): setting nodatasum [ 191.806013][ T7006] BTRFS info (device loop0): allowing degraded mounts [ 191.812774][ T7006] BTRFS info (device loop0): enabling disk space caching [ 191.819821][ T7006] BTRFS info (device loop0): disk space caching is enabled [ 191.843138][ T7006] BTRFS info (device loop0): enabling ssd optimizations [ 191.850149][ T7006] BTRFS info (device loop0): auto enabling async discard [ 191.858655][ T7006] BTRFS info (device loop0): rebuilding free space tree [ 191.870342][ T7006] BTRFS info (device loop0): disabling free space tree [ 191.877348][ T7006] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7006] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7006] chdir("./file0") = 0 [pid 7006] ioctl(4, LOOP_CLR_FD) = 0 [pid 7006] close(4) = 0 [pid 7006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7005] <... futex resumed>) = 0 [pid 7006] <... futex resumed>) = 1 [pid 7005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] open("./file0", O_RDONLY [pid 7005] <... futex resumed>) = 0 [pid 7005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7006] <... open resumed>) = 4 [pid 7006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 191.887014][ T7006] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.900118][ T7006] BTRFS info (device loop0): checking UUID tree [pid 7006] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7005] <... futex resumed>) = 0 [pid 7005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7006] <... futex resumed>) = 0 [pid 7005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7006] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7005] <... futex resumed>) = 0 [pid 7005] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7005] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 191.988725][ T7006] BTRFS info (device loop0): balance: start -d -m [ 191.997607][ T7006] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7006] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7005] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7005] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7005] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7005] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7024 attached [pid 7024] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7005] <... clone3 resumed> => {parent_tid=[293]}, 88) = 293 [pid 7024] <... rseq resumed>) = 0 [pid 7024] set_robust_list(0x7f8785c2b9a0, 24 [pid 7005] rt_sigprocmask(SIG_SETMASK, [], [pid 7024] <... set_robust_list resumed>) = 0 [pid 7024] rt_sigprocmask(SIG_SETMASK, [], [pid 7005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7005] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7005] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7024] open("./file0", O_RDONLY) = 5 [pid 7024] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7005] <... futex resumed>) = 0 [pid 7005] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7005] <... futex resumed>) = 0 [ 192.029121][ T7006] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7005] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7024] <... ioctl resumed>) = 0 [pid 7024] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 192.186091][ T7006] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 192.211331][ T7006] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7024] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7006] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7006] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7005] close(3) = 0 [pid 7005] close(4) = 0 [pid 7005] close(5) = 0 [pid 7005] close(6) = -1 EBADF (Bad file descriptor) [pid 7005] close(7) = -1 EBADF (Bad file descriptor) [pid 7005] close(8) = -1 EBADF (Bad file descriptor) [pid 7005] close(9) = -1 EBADF (Bad file descriptor) [pid 7005] close(10) = -1 EBADF (Bad file descriptor) [ 192.231303][ T7006] BTRFS info (device loop0): balance: ended with status: 0 [pid 7005] close(11) = -1 EBADF (Bad file descriptor) [pid 7005] close(12) = -1 EBADF (Bad file descriptor) [pid 7005] close(13) = -1 EBADF (Bad file descriptor) [pid 7005] close(14) = -1 EBADF (Bad file descriptor) [pid 7005] close(15) = -1 EBADF (Bad file descriptor) [pid 7005] close(16) = -1 EBADF (Bad file descriptor) [pid 7005] close(17) = -1 EBADF (Bad file descriptor) [pid 7005] close(18) = -1 EBADF (Bad file descriptor) [pid 7005] close(19) = -1 EBADF (Bad file descriptor) [pid 7005] close(20) = -1 EBADF (Bad file descriptor) [pid 7005] close(21) = -1 EBADF (Bad file descriptor) [pid 7005] close(22) = -1 EBADF (Bad file descriptor) [pid 7005] close(23) = -1 EBADF (Bad file descriptor) [pid 7005] close(24) = -1 EBADF (Bad file descriptor) [pid 7005] close(25) = -1 EBADF (Bad file descriptor) [pid 7005] close(26) = -1 EBADF (Bad file descriptor) [pid 7005] close(27) = -1 EBADF (Bad file descriptor) [pid 7005] close(28) = -1 EBADF (Bad file descriptor) [pid 7005] close(29) = -1 EBADF (Bad file descriptor) [pid 7005] exit_group(0 [pid 7024] <... futex resumed>) = ? [pid 7005] <... exit_group resumed>) = ? [pid 7024] +++ exited with 0 +++ [pid 7006] <... futex resumed>) = ? [pid 7006] +++ exited with 0 +++ [pid 7005] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./96/binderfs") = 0 [pid 5073] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./96/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./96") = 0 [pid 5073] mkdir("./97", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7025 attached [pid 7025] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 294 [pid 7025] <... set_robust_list resumed>) = 0 [pid 7025] chdir("./97") = 0 [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7025] setpgid(0, 0) = 0 [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7025] write(3, "1000", 4) = 4 [pid 7025] close(3) = 0 [pid 7025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7025] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7025] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7026 attached [pid 7026] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7025] <... clone3 resumed> => {parent_tid=[295]}, 88) = 295 [pid 7026] set_robust_list(0x7f8785c4c9a0, 24 [pid 7025] rt_sigprocmask(SIG_SETMASK, [], [pid 7026] <... set_robust_list resumed>) = 0 [pid 7025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7026] rt_sigprocmask(SIG_SETMASK, [], [pid 7025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7026] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7025] <... futex resumed>) = 0 [pid 7026] memfd_create("syzkaller", 0 [pid 7025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7026] <... memfd_create resumed>) = 3 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7026] munmap(0x7f877d82c000, 138412032) = 0 [pid 7026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7026] close(3) = 0 [pid 7026] mkdir("./file0", 0777) = 0 [ 192.813925][ T7026] loop0: detected capacity change from 0 to 32768 [ 192.827857][ T7026] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7026) [ 192.844652][ T7026] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 192.853938][ T7026] BTRFS info (device loop0): force clearing of disk cache [ 192.861059][ T7026] BTRFS info (device loop0): setting nodatasum [ 192.867321][ T7026] BTRFS info (device loop0): allowing degraded mounts [ 192.874193][ T7026] BTRFS info (device loop0): enabling disk space caching [ 192.881224][ T7026] BTRFS info (device loop0): disk space caching is enabled [ 192.903070][ T7026] BTRFS info (device loop0): enabling ssd optimizations [ 192.910071][ T7026] BTRFS info (device loop0): auto enabling async discard [ 192.918181][ T7026] BTRFS info (device loop0): rebuilding free space tree [ 192.930167][ T7026] BTRFS info (device loop0): disabling free space tree [ 192.937175][ T7026] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.946839][ T7026] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7026] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7026] chdir("./file0") = 0 [pid 7026] ioctl(4, LOOP_CLR_FD) = 0 [pid 7026] close(4) = 0 [pid 7026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7026] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7025] <... futex resumed>) = 0 [pid 7025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7026] <... futex resumed>) = 0 [pid 7025] <... futex resumed>) = 1 [pid 7026] open("./file0", O_RDONLY [pid 7025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7026] <... open resumed>) = 4 [pid 7026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7026] <... futex resumed>) = 0 [pid 7025] <... futex resumed>) = 0 [pid 7026] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7026] <... ioctl resumed>) = 0 [pid 7026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7025] <... futex resumed>) = 0 [pid 7026] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7025] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7025] <... futex resumed>) = 0 [ 192.960334][ T7026] BTRFS info (device loop0): checking UUID tree [pid 7025] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7026] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7025] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7025] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[296]}, 88) = 296 [pid 7025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7025] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7044 attached [pid 7044] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7044] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7044] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7044] open("./file0", O_RDONLY) = 5 [pid 7044] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7044] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7025] <... futex resumed>) = 0 [pid 7025] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7044] <... futex resumed>) = 0 [pid 7025] <... futex resumed>) = 1 [pid 7025] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 193.019421][ T7026] BTRFS info (device loop0): balance: start -d -m [ 193.029728][ T7026] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 193.053370][ T7026] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7044] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7044] <... ioctl resumed>) = 0 [pid 7044] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 193.217880][ T7026] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 193.241463][ T7026] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7044] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7026] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7026] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] close(3 [pid 7026] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7025] <... close resumed>) = 0 [pid 7025] close(4) = 0 [pid 7025] close(5) = 0 [pid 7025] close(6) = -1 EBADF (Bad file descriptor) [pid 7025] close(7) = -1 EBADF (Bad file descriptor) [pid 7025] close(8) = -1 EBADF (Bad file descriptor) [pid 7025] close(9) = -1 EBADF (Bad file descriptor) [pid 7025] close(10) = -1 EBADF (Bad file descriptor) [pid 7025] close(11) = -1 EBADF (Bad file descriptor) [pid 7025] close(12) = -1 EBADF (Bad file descriptor) [pid 7025] close(13) = -1 EBADF (Bad file descriptor) [ 193.261415][ T7026] BTRFS info (device loop0): balance: ended with status: 0 [pid 7025] close(14) = -1 EBADF (Bad file descriptor) [pid 7025] close(15) = -1 EBADF (Bad file descriptor) [pid 7025] close(16) = -1 EBADF (Bad file descriptor) [pid 7025] close(17) = -1 EBADF (Bad file descriptor) [pid 7025] close(18) = -1 EBADF (Bad file descriptor) [pid 7025] close(19) = -1 EBADF (Bad file descriptor) [pid 7025] close(20) = -1 EBADF (Bad file descriptor) [pid 7025] close(21) = -1 EBADF (Bad file descriptor) [pid 7025] close(22) = -1 EBADF (Bad file descriptor) [pid 7025] close(23) = -1 EBADF (Bad file descriptor) [pid 7025] close(24) = -1 EBADF (Bad file descriptor) [pid 7025] close(25) = -1 EBADF (Bad file descriptor) [pid 7025] close(26) = -1 EBADF (Bad file descriptor) [pid 7025] close(27) = -1 EBADF (Bad file descriptor) [pid 7025] close(28) = -1 EBADF (Bad file descriptor) [pid 7025] close(29) = -1 EBADF (Bad file descriptor) [pid 7025] exit_group(0 [pid 7044] <... futex resumed>) = ? [pid 7026] <... futex resumed>) = ? [pid 7025] <... exit_group resumed>) = ? [pid 7044] +++ exited with 0 +++ [pid 7026] +++ exited with 0 +++ [pid 7025] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=294, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./97/binderfs") = 0 [pid 5073] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./97/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./97") = 0 [pid 5073] mkdir("./98", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7045 attached , child_tidptr=0x5555570a9690) = 297 [pid 7045] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7045] chdir("./98") = 0 [pid 7045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7045] setpgid(0, 0) = 0 [pid 7045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7045] write(3, "1000", 4) = 4 [pid 7045] close(3) = 0 [pid 7045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7045] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7045] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7046 attached [pid 7046] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7045] <... clone3 resumed> => {parent_tid=[298]}, 88) = 298 [pid 7046] <... rseq resumed>) = 0 [pid 7045] rt_sigprocmask(SIG_SETMASK, [], [pid 7046] set_robust_list(0x7f8785c4c9a0, 24 [pid 7045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7046] <... set_robust_list resumed>) = 0 [pid 7045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] rt_sigprocmask(SIG_SETMASK, [], [pid 7045] <... futex resumed>) = 0 [pid 7046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7046] memfd_create("syzkaller", 0) = 3 [pid 7046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7046] munmap(0x7f877d82c000, 138412032) = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7046] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7046] close(3) = 0 [pid 7046] mkdir("./file0", 0777) = 0 [ 193.873020][ T7046] loop0: detected capacity change from 0 to 32768 [ 193.907815][ T7046] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7046) [ 193.923681][ T7046] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 193.933427][ T7046] BTRFS info (device loop0): force clearing of disk cache [ 193.940887][ T7046] BTRFS info (device loop0): setting nodatasum [ 193.947137][ T7046] BTRFS info (device loop0): allowing degraded mounts [ 193.953960][ T7046] BTRFS info (device loop0): enabling disk space caching [ 193.960979][ T7046] BTRFS info (device loop0): disk space caching is enabled [ 193.993183][ T7046] BTRFS info (device loop0): enabling ssd optimizations [ 194.000250][ T7046] BTRFS info (device loop0): auto enabling async discard [ 194.008489][ T7046] BTRFS info (device loop0): rebuilding free space tree [ 194.020654][ T7046] BTRFS info (device loop0): disabling free space tree [ 194.027635][ T7046] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7046] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7046] chdir("./file0") = 0 [pid 7046] ioctl(4, LOOP_CLR_FD) = 0 [pid 7046] close(4) = 0 [pid 7046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7045] <... futex resumed>) = 0 [pid 7045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] open("./file0", O_RDONLY [pid 7045] <... futex resumed>) = 0 [pid 7046] <... open resumed>) = 4 [pid 7045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7045] <... futex resumed>) = 0 [pid 7046] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] <... ioctl resumed>) = 0 [pid 7045] <... futex resumed>) = 0 [pid 7046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7046] <... futex resumed>) = 0 [pid 7045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7046] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7045] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 194.037335][ T7046] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.051435][ T7046] BTRFS info (device loop0): checking UUID tree [pid 7045] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7045] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7045] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[299]}, 88) = 299 ./strace-static-x86_64: Process 7064 attached [pid 7045] rt_sigprocmask(SIG_SETMASK, [], [pid 7064] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7064] <... rseq resumed>) = 0 [pid 7045] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7045] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7064] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7064] open("./file0", O_RDONLY) = 5 [pid 7064] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7045] <... futex resumed>) = 0 [pid 7064] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7045] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 194.101795][ T7046] BTRFS info (device loop0): balance: start -d -m [ 194.110994][ T7046] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 194.136000][ T7046] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7045] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7064] <... ioctl resumed>) = 0 [pid 7064] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 194.307447][ T7046] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 194.336387][ T7046] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7064] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7046] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7046] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7045] close(3) = 0 [pid 7045] close(4) = 0 [pid 7045] close(5) = 0 [pid 7045] close(6) = -1 EBADF (Bad file descriptor) [pid 7045] close(7) = -1 EBADF (Bad file descriptor) [ 194.355575][ T7046] BTRFS info (device loop0): balance: ended with status: 0 [pid 7045] close(8) = -1 EBADF (Bad file descriptor) [pid 7045] close(9) = -1 EBADF (Bad file descriptor) [pid 7045] close(10) = -1 EBADF (Bad file descriptor) [pid 7045] close(11) = -1 EBADF (Bad file descriptor) [pid 7045] close(12) = -1 EBADF (Bad file descriptor) [pid 7045] close(13) = -1 EBADF (Bad file descriptor) [pid 7045] close(14) = -1 EBADF (Bad file descriptor) [pid 7045] close(15) = -1 EBADF (Bad file descriptor) [pid 7045] close(16) = -1 EBADF (Bad file descriptor) [pid 7045] close(17) = -1 EBADF (Bad file descriptor) [pid 7045] close(18) = -1 EBADF (Bad file descriptor) [pid 7045] close(19) = -1 EBADF (Bad file descriptor) [pid 7045] close(20) = -1 EBADF (Bad file descriptor) [pid 7045] close(21) = -1 EBADF (Bad file descriptor) [pid 7045] close(22) = -1 EBADF (Bad file descriptor) [pid 7045] close(23) = -1 EBADF (Bad file descriptor) [pid 7045] close(24) = -1 EBADF (Bad file descriptor) [pid 7045] close(25) = -1 EBADF (Bad file descriptor) [pid 7045] close(26) = -1 EBADF (Bad file descriptor) [pid 7045] close(27) = -1 EBADF (Bad file descriptor) [pid 7045] close(28) = -1 EBADF (Bad file descriptor) [pid 7045] close(29) = -1 EBADF (Bad file descriptor) [pid 7045] exit_group(0) = ? [pid 7064] <... futex resumed>) = ? [pid 7046] <... futex resumed>) = ? [pid 7064] +++ exited with 0 +++ [pid 7046] +++ exited with 0 +++ [pid 7045] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./98/binderfs") = 0 [pid 5073] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./98/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./98") = 0 [pid 5073] mkdir("./99", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7065 attached [pid 7065] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7065] chdir("./99" [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 300 [pid 7065] <... chdir resumed>) = 0 [pid 7065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7065] setpgid(0, 0) = 0 [pid 7065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7065] write(3, "1000", 4) = 4 [pid 7065] close(3) = 0 [pid 7065] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7065] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7065] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7065] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7066 attached [pid 7066] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7066] set_robust_list(0x7f8785c4c9a0, 24 [pid 7065] <... clone3 resumed> => {parent_tid=[301]}, 88) = 301 [pid 7066] <... set_robust_list resumed>) = 0 [pid 7066] rt_sigprocmask(SIG_SETMASK, [], [pid 7065] rt_sigprocmask(SIG_SETMASK, [], [pid 7066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7066] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] memfd_create("syzkaller", 0 [pid 7065] <... futex resumed>) = 0 [pid 7066] <... memfd_create resumed>) = 3 [pid 7066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7066] munmap(0x7f877d82c000, 138412032) = 0 [pid 7066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7066] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7066] close(3) = 0 [pid 7066] mkdir("./file0", 0777) = 0 [ 194.969967][ T7066] loop0: detected capacity change from 0 to 32768 [ 194.984131][ T7066] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7066) [ 195.000027][ T7066] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.009361][ T7066] BTRFS info (device loop0): force clearing of disk cache [ 195.016541][ T7066] BTRFS info (device loop0): setting nodatasum [ 195.022710][ T7066] BTRFS info (device loop0): allowing degraded mounts [ 195.029554][ T7066] BTRFS info (device loop0): enabling disk space caching [ 195.036626][ T7066] BTRFS info (device loop0): disk space caching is enabled [ 195.058617][ T7066] BTRFS info (device loop0): enabling ssd optimizations [ 195.065625][ T7066] BTRFS info (device loop0): auto enabling async discard [ 195.073397][ T7066] BTRFS info (device loop0): rebuilding free space tree [ 195.085893][ T7066] BTRFS info (device loop0): disabling free space tree [ 195.092786][ T7066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.102555][ T7066] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7066] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7066] chdir("./file0") = 0 [pid 7066] ioctl(4, LOOP_CLR_FD) = 0 [pid 7066] close(4) = 0 [ 195.115830][ T7066] BTRFS info (device loop0): checking UUID tree [pid 7066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] <... futex resumed>) = 0 [pid 7066] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7065] <... futex resumed>) = 0 [pid 7066] open("./file0", O_RDONLY [pid 7065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7066] <... open resumed>) = 4 [pid 7066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] <... futex resumed>) = 0 [pid 7066] <... futex resumed>) = 1 [pid 7065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7065] <... futex resumed>) = 0 [pid 7066] <... ioctl resumed>) = 0 [pid 7065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] <... futex resumed>) = 0 [pid 7066] <... futex resumed>) = 1 [pid 7065] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7065] <... futex resumed>) = 0 [pid 7065] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7065] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7065] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7065] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[302]}, 88) = 302 [pid 7065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7084 attached [ 195.193819][ T7066] BTRFS info (device loop0): balance: start -d -m [ 195.202886][ T7066] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 195.229968][ T7066] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7084] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7065] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7084] <... rseq resumed>) = 0 [pid 7065] <... futex resumed>) = 0 [pid 7084] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7084] rt_sigprocmask(SIG_SETMASK, [], [pid 7065] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7084] open("./file0", O_RDONLY) = 5 [pid 7084] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] <... futex resumed>) = 0 [pid 7084] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7065] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7065] <... futex resumed>) = 0 [pid 7084] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7065] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 195.296052][ T7066] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7084] <... ioctl resumed>) = 0 [pid 7084] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7084] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7066] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7066] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7065] close(3 [pid 7066] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7065] <... close resumed>) = 0 [pid 7065] close(4) = 0 [pid 7065] close(5) = 0 [pid 7065] close(6) = -1 EBADF (Bad file descriptor) [pid 7065] close(7) = -1 EBADF (Bad file descriptor) [pid 7065] close(8) = -1 EBADF (Bad file descriptor) [pid 7065] close(9) = -1 EBADF (Bad file descriptor) [pid 7065] close(10) = -1 EBADF (Bad file descriptor) [pid 7065] close(11) = -1 EBADF (Bad file descriptor) [pid 7065] close(12) = -1 EBADF (Bad file descriptor) [pid 7065] close(13) = -1 EBADF (Bad file descriptor) [ 195.419345][ T7066] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 195.438265][ T7066] BTRFS info (device loop0): balance: ended with status: 0 [pid 7065] close(14) = -1 EBADF (Bad file descriptor) [pid 7065] close(15) = -1 EBADF (Bad file descriptor) [pid 7065] close(16) = -1 EBADF (Bad file descriptor) [pid 7065] close(17) = -1 EBADF (Bad file descriptor) [pid 7065] close(18) = -1 EBADF (Bad file descriptor) [pid 7065] close(19) = -1 EBADF (Bad file descriptor) [pid 7065] close(20) = -1 EBADF (Bad file descriptor) [pid 7065] close(21) = -1 EBADF (Bad file descriptor) [pid 7065] close(22) = -1 EBADF (Bad file descriptor) [pid 7065] close(23) = -1 EBADF (Bad file descriptor) [pid 7065] close(24) = -1 EBADF (Bad file descriptor) [pid 7065] close(25) = -1 EBADF (Bad file descriptor) [pid 7065] close(26) = -1 EBADF (Bad file descriptor) [pid 7065] close(27) = -1 EBADF (Bad file descriptor) [pid 7065] close(28) = -1 EBADF (Bad file descriptor) [pid 7065] close(29) = -1 EBADF (Bad file descriptor) [pid 7065] exit_group(0 [pid 7084] <... futex resumed>) = ? [pid 7066] <... futex resumed>) = ? [pid 7065] <... exit_group resumed>) = ? [pid 7084] +++ exited with 0 +++ [pid 7066] +++ exited with 0 +++ [pid 7065] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./99/binderfs") = 0 [pid 5073] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./99/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./99") = 0 [pid 5073] mkdir("./100", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7085 attached , child_tidptr=0x5555570a9690) = 303 [pid 7085] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7085] chdir("./100") = 0 [pid 7085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7085] setpgid(0, 0) = 0 [pid 7085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7085] write(3, "1000", 4) = 4 [pid 7085] close(3) = 0 [pid 7085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7085] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7085] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7086 attached => {parent_tid=[304]}, 88) = 304 [pid 7086] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7085] rt_sigprocmask(SIG_SETMASK, [], [pid 7086] set_robust_list(0x7f8785c4c9a0, 24 [pid 7085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7086] <... set_robust_list resumed>) = 0 [pid 7086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] <... futex resumed>) = 0 [pid 7085] <... futex resumed>) = 1 [pid 7086] memfd_create("syzkaller", 0 [pid 7085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7086] <... memfd_create resumed>) = 3 [pid 7086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7086] munmap(0x7f877d82c000, 138412032) = 0 [pid 7086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7086] close(3) = 0 [pid 7086] mkdir("./file0", 0777) = 0 [ 195.947461][ T7086] loop0: detected capacity change from 0 to 32768 [ 195.962374][ T7086] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7086) [ 195.978402][ T7086] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.987697][ T7086] BTRFS info (device loop0): force clearing of disk cache [ 195.994839][ T7086] BTRFS info (device loop0): setting nodatasum [ 196.000983][ T7086] BTRFS info (device loop0): allowing degraded mounts [ 196.007788][ T7086] BTRFS info (device loop0): enabling disk space caching [ 196.014856][ T7086] BTRFS info (device loop0): disk space caching is enabled [ 196.036199][ T7086] BTRFS info (device loop0): enabling ssd optimizations [ 196.043328][ T7086] BTRFS info (device loop0): auto enabling async discard [ 196.052101][ T7086] BTRFS info (device loop0): rebuilding free space tree [ 196.064694][ T7086] BTRFS info (device loop0): disabling free space tree [ 196.071592][ T7086] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.081412][ T7086] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7086] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7086] chdir("./file0") = 0 [pid 7086] ioctl(4, LOOP_CLR_FD) = 0 [pid 7086] close(4) = 0 [pid 7086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] <... futex resumed>) = 0 [pid 7085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] <... futex resumed>) = 0 [pid 7085] <... futex resumed>) = 1 [pid 7086] open("./file0", O_RDONLY [pid 7085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7086] <... open resumed>) = 4 [ 196.094597][ T7086] BTRFS info (device loop0): checking UUID tree [pid 7086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7085] <... futex resumed>) = 0 [pid 7086] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] <... ioctl resumed>) = 0 [pid 7085] <... futex resumed>) = 0 [pid 7085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7085] <... futex resumed>) = 0 [pid 7086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7085] <... futex resumed>) = 0 [pid 7086] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7085] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7085] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7085] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[305]}, 88) = 305 ./strace-static-x86_64: Process 7104 attached [pid 7104] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7085] rt_sigprocmask(SIG_SETMASK, [], [pid 7104] <... rseq resumed>) = 0 [pid 7104] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7085] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7104] open("./file0", O_RDONLY) = 5 [pid 7085] <... futex resumed>) = 0 [ 196.165370][ T7086] BTRFS info (device loop0): balance: start -d -m [ 196.176221][ T7086] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 196.204342][ T7086] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7104] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7085] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7085] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7085] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7104] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7085] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7085] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 196.252870][ T7086] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7104] <... ioctl resumed>) = 0 [pid 7104] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7104] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7086] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7086] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7086] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] close(3) = 0 [pid 7085] close(4) = 0 [pid 7085] close(5) = 0 [pid 7085] close(6) = -1 EBADF (Bad file descriptor) [pid 7085] close(7) = -1 EBADF (Bad file descriptor) [pid 7085] close(8) = -1 EBADF (Bad file descriptor) [pid 7085] close(9) = -1 EBADF (Bad file descriptor) [pid 7085] close(10) = -1 EBADF (Bad file descriptor) [pid 7085] close(11) = -1 EBADF (Bad file descriptor) [pid 7085] close(12) = -1 EBADF (Bad file descriptor) [ 196.376237][ T7086] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 196.395678][ T7086] BTRFS info (device loop0): balance: ended with status: 0 [pid 7085] close(13) = -1 EBADF (Bad file descriptor) [pid 7085] close(14) = -1 EBADF (Bad file descriptor) [pid 7085] close(15) = -1 EBADF (Bad file descriptor) [pid 7085] close(16) = -1 EBADF (Bad file descriptor) [pid 7085] close(17) = -1 EBADF (Bad file descriptor) [pid 7085] close(18) = -1 EBADF (Bad file descriptor) [pid 7085] close(19) = -1 EBADF (Bad file descriptor) [pid 7085] close(20) = -1 EBADF (Bad file descriptor) [pid 7085] close(21) = -1 EBADF (Bad file descriptor) [pid 7085] close(22) = -1 EBADF (Bad file descriptor) [pid 7085] close(23) = -1 EBADF (Bad file descriptor) [pid 7085] close(24) = -1 EBADF (Bad file descriptor) [pid 7085] close(25) = -1 EBADF (Bad file descriptor) [pid 7085] close(26) = -1 EBADF (Bad file descriptor) [pid 7085] close(27) = -1 EBADF (Bad file descriptor) [pid 7085] close(28) = -1 EBADF (Bad file descriptor) [pid 7085] close(29) = -1 EBADF (Bad file descriptor) [pid 7085] exit_group(0 [pid 7104] <... futex resumed>) = ? [pid 7086] <... futex resumed>) = ? [pid 7085] <... exit_group resumed>) = ? [pid 7104] +++ exited with 0 +++ [pid 7086] +++ exited with 0 +++ [pid 7085] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./100/binderfs") = 0 [pid 5073] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./100/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./100") = 0 [pid 5073] mkdir("./101", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7105 attached , child_tidptr=0x5555570a9690) = 306 [pid 7105] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7105] chdir("./101") = 0 [pid 7105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7105] setpgid(0, 0) = 0 [pid 7105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7105] write(3, "1000", 4) = 4 [pid 7105] close(3) = 0 [pid 7105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7105] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7105] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7105] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7106 attached [pid 7106] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7105] <... clone3 resumed> => {parent_tid=[307]}, 88) = 307 [pid 7106] set_robust_list(0x7f8785c4c9a0, 24 [pid 7105] rt_sigprocmask(SIG_SETMASK, [], [pid 7106] <... set_robust_list resumed>) = 0 [pid 7106] rt_sigprocmask(SIG_SETMASK, [], [pid 7105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7106] memfd_create("syzkaller", 0) = 3 [pid 7106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7106] munmap(0x7f877d82c000, 138412032) = 0 [pid 7106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7106] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7106] close(3) = 0 [pid 7106] mkdir("./file0", 0777) = 0 [ 197.007456][ T7106] loop0: detected capacity change from 0 to 32768 [ 197.025050][ T7106] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7106) [ 197.040389][ T7106] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 197.049703][ T7106] BTRFS info (device loop0): force clearing of disk cache [ 197.056867][ T7106] BTRFS info (device loop0): setting nodatasum [ 197.063027][ T7106] BTRFS info (device loop0): allowing degraded mounts [ 197.069856][ T7106] BTRFS info (device loop0): enabling disk space caching [ 197.076926][ T7106] BTRFS info (device loop0): disk space caching is enabled [ 197.098098][ T7106] BTRFS info (device loop0): enabling ssd optimizations [ 197.105195][ T7106] BTRFS info (device loop0): auto enabling async discard [ 197.113085][ T7106] BTRFS info (device loop0): rebuilding free space tree [ 197.125449][ T7106] BTRFS info (device loop0): disabling free space tree [ 197.132341][ T7106] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.142060][ T7106] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7106] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7106] chdir("./file0") = 0 [pid 7106] ioctl(4, LOOP_CLR_FD) = 0 [pid 7106] close(4) = 0 [pid 7106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7105] <... futex resumed>) = 0 [pid 7105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] open("./file0", O_RDONLY [pid 7105] <... futex resumed>) = 0 [pid 7106] <... open resumed>) = 4 [pid 7105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7105] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... futex resumed>) = 0 [pid 7105] <... futex resumed>) = 0 [pid 7106] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 197.155371][ T7106] BTRFS info (device loop0): checking UUID tree [pid 7105] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... futex resumed>) = 0 [pid 7105] <... futex resumed>) = 1 [pid 7106] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7105] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7105] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7105] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7105] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7124 attached => {parent_tid=[308]}, 88) = 308 [pid 7124] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7124] set_robust_list(0x7f8785c2b9a0, 24 [pid 7105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7105] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] <... set_robust_list resumed>) = 0 [pid 7124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7124] open("./file0", O_RDONLY) = 5 [pid 7124] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7105] <... futex resumed>) = 0 [ 197.204822][ T7106] BTRFS info (device loop0): balance: start -d -m [ 197.213027][ T7106] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 197.240324][ T7106] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7124] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7124] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7105] <... futex resumed>) = 0 [pid 7105] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7105] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 197.331198][ T7106] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7124] <... ioctl resumed>) = 0 [pid 7124] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7124] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7106] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7106] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] close(3 [pid 7106] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] <... close resumed>) = 0 [pid 7105] close(4) = 0 [pid 7105] close(5) = 0 [pid 7105] close(6) = -1 EBADF (Bad file descriptor) [pid 7105] close(7) = -1 EBADF (Bad file descriptor) [pid 7105] close(8) = -1 EBADF (Bad file descriptor) [pid 7105] close(9) = -1 EBADF (Bad file descriptor) [pid 7105] close(10) = -1 EBADF (Bad file descriptor) [pid 7105] close(11) = -1 EBADF (Bad file descriptor) [pid 7105] close(12) = -1 EBADF (Bad file descriptor) [pid 7105] close(13) = -1 EBADF (Bad file descriptor) [pid 7105] close(14) = -1 EBADF (Bad file descriptor) [pid 7105] close(15) = -1 EBADF (Bad file descriptor) [pid 7105] close(16) = -1 EBADF (Bad file descriptor) [ 197.425977][ T7106] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 197.447103][ T7106] BTRFS info (device loop0): balance: ended with status: 0 [pid 7105] close(17) = -1 EBADF (Bad file descriptor) [pid 7105] close(18) = -1 EBADF (Bad file descriptor) [pid 7105] close(19) = -1 EBADF (Bad file descriptor) [pid 7105] close(20) = -1 EBADF (Bad file descriptor) [pid 7105] close(21) = -1 EBADF (Bad file descriptor) [pid 7105] close(22) = -1 EBADF (Bad file descriptor) [pid 7105] close(23) = -1 EBADF (Bad file descriptor) [pid 7105] close(24) = -1 EBADF (Bad file descriptor) [pid 7105] close(25) = -1 EBADF (Bad file descriptor) [pid 7105] close(26) = -1 EBADF (Bad file descriptor) [pid 7105] close(27) = -1 EBADF (Bad file descriptor) [pid 7105] close(28) = -1 EBADF (Bad file descriptor) [pid 7105] close(29) = -1 EBADF (Bad file descriptor) [pid 7105] exit_group(0 [pid 7124] <... futex resumed>) = ? [pid 7106] <... futex resumed>) = ? [pid 7105] <... exit_group resumed>) = ? [pid 7124] +++ exited with 0 +++ [pid 7106] +++ exited with 0 +++ [pid 7105] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./101/binderfs") = 0 [pid 5073] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./101/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./101") = 0 [pid 5073] mkdir("./102", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7125 attached , child_tidptr=0x5555570a9690) = 309 [pid 7125] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7125] chdir("./102") = 0 [pid 7125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7125] setpgid(0, 0) = 0 [pid 7125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7125] write(3, "1000", 4) = 4 [pid 7125] close(3) = 0 [pid 7125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7125] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7125] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7126 attached [pid 7126] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7125] <... clone3 resumed> => {parent_tid=[310]}, 88) = 310 [pid 7126] <... rseq resumed>) = 0 [pid 7125] rt_sigprocmask(SIG_SETMASK, [], [pid 7126] set_robust_list(0x7f8785c4c9a0, 24 [pid 7125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7126] <... set_robust_list resumed>) = 0 [pid 7125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7125] <... futex resumed>) = 0 [pid 7126] memfd_create("syzkaller", 0 [pid 7125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7126] <... memfd_create resumed>) = 3 [pid 7126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7126] munmap(0x7f877d82c000, 138412032) = 0 [pid 7126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7126] close(3) = 0 [pid 7126] mkdir("./file0", 0777) = 0 [ 198.060172][ T7126] loop0: detected capacity change from 0 to 32768 [ 198.074693][ T7126] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7126) [ 198.090424][ T7126] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 198.099732][ T7126] BTRFS info (device loop0): force clearing of disk cache [ 198.106912][ T7126] BTRFS info (device loop0): setting nodatasum [ 198.113088][ T7126] BTRFS info (device loop0): allowing degraded mounts [ 198.119924][ T7126] BTRFS info (device loop0): enabling disk space caching [ 198.127046][ T7126] BTRFS info (device loop0): disk space caching is enabled [ 198.148411][ T7126] BTRFS info (device loop0): enabling ssd optimizations [ 198.155525][ T7126] BTRFS info (device loop0): auto enabling async discard [ 198.164199][ T7126] BTRFS info (device loop0): rebuilding free space tree [ 198.176259][ T7126] BTRFS info (device loop0): disabling free space tree [ 198.183169][ T7126] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.192935][ T7126] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7126] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7126] chdir("./file0") = 0 [pid 7126] ioctl(4, LOOP_CLR_FD) = 0 [ 198.206055][ T7126] BTRFS info (device loop0): checking UUID tree [pid 7126] close(4) = 0 [pid 7126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7125] <... futex resumed>) = 0 [pid 7126] open("./file0", O_RDONLY [pid 7125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... open resumed>) = 4 [pid 7125] <... futex resumed>) = 0 [pid 7125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7125] <... futex resumed>) = 0 [pid 7126] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... ioctl resumed>) = 0 [pid 7125] <... futex resumed>) = 0 [pid 7126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7125] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = 0 [pid 7125] <... futex resumed>) = 1 [pid 7126] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7125] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7125] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7125] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7144 attached [pid 7144] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7144] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7144] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7125] <... clone3 resumed> => {parent_tid=[311]}, 88) = 311 [pid 7125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7125] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] <... futex resumed>) = 0 [pid 7125] <... futex resumed>) = 1 [pid 7144] open("./file0", O_RDONLY [pid 7125] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7144] <... open resumed>) = 5 [pid 7144] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7125] <... futex resumed>) = 0 [pid 7125] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7125] <... futex resumed>) = 0 [ 198.278239][ T7126] BTRFS info (device loop0): balance: start -d -m [ 198.288308][ T7126] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 198.315229][ T7126] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7125] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 198.400964][ T7126] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7144] <... ioctl resumed>) = 0 [pid 7144] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7126] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7126] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7125] close(3) = 0 [pid 7125] close(4) = 0 [pid 7125] close(5) = 0 [pid 7125] close(6) = -1 EBADF (Bad file descriptor) [pid 7125] close(7) = -1 EBADF (Bad file descriptor) [ 198.504769][ T7126] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 198.524899][ T7126] BTRFS info (device loop0): balance: ended with status: 0 [pid 7125] close(8) = -1 EBADF (Bad file descriptor) [pid 7125] close(9) = -1 EBADF (Bad file descriptor) [pid 7125] close(10) = -1 EBADF (Bad file descriptor) [pid 7125] close(11) = -1 EBADF (Bad file descriptor) [pid 7125] close(12) = -1 EBADF (Bad file descriptor) [pid 7125] close(13) = -1 EBADF (Bad file descriptor) [pid 7125] close(14) = -1 EBADF (Bad file descriptor) [pid 7125] close(15) = -1 EBADF (Bad file descriptor) [pid 7125] close(16) = -1 EBADF (Bad file descriptor) [pid 7125] close(17) = -1 EBADF (Bad file descriptor) [pid 7125] close(18) = -1 EBADF (Bad file descriptor) [pid 7125] close(19) = -1 EBADF (Bad file descriptor) [pid 7125] close(20) = -1 EBADF (Bad file descriptor) [pid 7125] close(21) = -1 EBADF (Bad file descriptor) [pid 7125] close(22) = -1 EBADF (Bad file descriptor) [pid 7125] close(23) = -1 EBADF (Bad file descriptor) [pid 7125] close(24) = -1 EBADF (Bad file descriptor) [pid 7125] close(25) = -1 EBADF (Bad file descriptor) [pid 7125] close(26) = -1 EBADF (Bad file descriptor) [pid 7125] close(27) = -1 EBADF (Bad file descriptor) [pid 7125] close(28) = -1 EBADF (Bad file descriptor) [pid 7125] close(29) = -1 EBADF (Bad file descriptor) [pid 7125] exit_group(0) = ? [pid 7144] <... futex resumed>) = ? [pid 7126] <... futex resumed>) = ? [pid 7144] +++ exited with 0 +++ [pid 7126] +++ exited with 0 +++ [pid 7125] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./102/binderfs") = 0 [pid 5073] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./102/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./102") = 0 [pid 5073] mkdir("./103", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7145 attached , child_tidptr=0x5555570a9690) = 312 [pid 7145] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7145] chdir("./103") = 0 [pid 7145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7145] setpgid(0, 0) = 0 [pid 7145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7145] write(3, "1000", 4) = 4 [pid 7145] close(3) = 0 [pid 7145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7145] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7145] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7146 attached => {parent_tid=[313]}, 88) = 313 [pid 7146] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7145] rt_sigprocmask(SIG_SETMASK, [], [pid 7146] <... rseq resumed>) = 0 [pid 7146] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 7145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] memfd_create("syzkaller", 0 [pid 7145] <... futex resumed>) = 0 [pid 7146] <... memfd_create resumed>) = 3 [pid 7145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7146] munmap(0x7f877d82c000, 138412032) = 0 [pid 7146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7146] close(3) = 0 [pid 7146] mkdir("./file0", 0777) = 0 [ 199.118852][ T7146] loop0: detected capacity change from 0 to 32768 [ 199.142735][ T7146] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7146) [ 199.159611][ T7146] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.168897][ T7146] BTRFS info (device loop0): force clearing of disk cache [ 199.176044][ T7146] BTRFS info (device loop0): setting nodatasum [ 199.182202][ T7146] BTRFS info (device loop0): allowing degraded mounts [ 199.189026][ T7146] BTRFS info (device loop0): enabling disk space caching [ 199.196089][ T7146] BTRFS info (device loop0): disk space caching is enabled [ 199.217489][ T7146] BTRFS info (device loop0): enabling ssd optimizations [ 199.224479][ T7146] BTRFS info (device loop0): auto enabling async discard [ 199.232383][ T7146] BTRFS info (device loop0): rebuilding free space tree [ 199.244974][ T7146] BTRFS info (device loop0): disabling free space tree [ 199.252074][ T7146] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7146] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7146] chdir("./file0") = 0 [pid 7146] ioctl(4, LOOP_CLR_FD) = 0 [pid 7146] close(4) = 0 [pid 7146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7146] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7145] <... futex resumed>) = 0 [ 199.262181][ T7146] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 199.276571][ T7146] BTRFS info (device loop0): checking UUID tree [pid 7145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] <... futex resumed>) = 0 [pid 7145] <... futex resumed>) = 1 [pid 7146] open("./file0", O_RDONLY) = 4 [pid 7145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7145] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7145] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7145] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[314]}, 88) = 314 [pid 7145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7145] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7164 attached [pid 7145] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7164] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7164] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7164] open("./file0", O_RDONLY) = 5 [pid 7164] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 199.360461][ T7146] BTRFS info (device loop0): balance: start -d -m [ 199.370440][ T7146] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 199.394516][ T7146] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7145] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 199.484276][ T7146] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7164] <... ioctl resumed>) = 0 [pid 7164] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7146] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7146] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7146] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7145] close(3) = 0 [pid 7145] close(4) = 0 [pid 7145] close(5) = 0 [pid 7145] close(6) = -1 EBADF (Bad file descriptor) [pid 7145] close(7) = -1 EBADF (Bad file descriptor) [pid 7145] close(8) = -1 EBADF (Bad file descriptor) [pid 7145] close(9) = -1 EBADF (Bad file descriptor) [pid 7145] close(10) = -1 EBADF (Bad file descriptor) [pid 7145] close(11) = -1 EBADF (Bad file descriptor) [pid 7145] close(12) = -1 EBADF (Bad file descriptor) [pid 7145] close(13) = -1 EBADF (Bad file descriptor) [pid 7145] close(14) = -1 EBADF (Bad file descriptor) [pid 7145] close(15) = -1 EBADF (Bad file descriptor) [pid 7145] close(16) = -1 EBADF (Bad file descriptor) [pid 7145] close(17) = -1 EBADF (Bad file descriptor) [pid 7145] close(18) = -1 EBADF (Bad file descriptor) [pid 7145] close(19) = -1 EBADF (Bad file descriptor) [pid 7145] close(20) = -1 EBADF (Bad file descriptor) [pid 7145] close(21) = -1 EBADF (Bad file descriptor) [pid 7145] close(22) = -1 EBADF (Bad file descriptor) [pid 7145] close(23) = -1 EBADF (Bad file descriptor) [ 199.577264][ T7146] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 199.597665][ T7146] BTRFS info (device loop0): balance: ended with status: 0 [pid 7145] close(24) = -1 EBADF (Bad file descriptor) [pid 7145] close(25) = -1 EBADF (Bad file descriptor) [pid 7145] close(26) = -1 EBADF (Bad file descriptor) [pid 7145] close(27) = -1 EBADF (Bad file descriptor) [pid 7145] close(28) = -1 EBADF (Bad file descriptor) [pid 7145] close(29) = -1 EBADF (Bad file descriptor) [pid 7145] exit_group(0 [pid 7164] <... futex resumed>) = ? [pid 7146] <... futex resumed>) = ? [pid 7145] <... exit_group resumed>) = ? [pid 7164] +++ exited with 0 +++ [pid 7146] +++ exited with 0 +++ [pid 7145] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./103/binderfs") = 0 [pid 5073] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./103/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./103") = 0 [pid 5073] mkdir("./104", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7165 attached , child_tidptr=0x5555570a9690) = 315 [pid 7165] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7165] chdir("./104") = 0 [pid 7165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7165] setpgid(0, 0) = 0 [pid 7165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7165] write(3, "1000", 4) = 4 [pid 7165] close(3) = 0 [pid 7165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7165] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7165] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7165] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7165] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7166 attached [pid 7166] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7165] <... clone3 resumed> => {parent_tid=[316]}, 88) = 316 [pid 7166] <... rseq resumed>) = 0 [pid 7165] rt_sigprocmask(SIG_SETMASK, [], [pid 7166] set_robust_list(0x7f8785c4c9a0, 24 [pid 7165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7166] <... set_robust_list resumed>) = 0 [pid 7165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] rt_sigprocmask(SIG_SETMASK, [], [pid 7165] <... futex resumed>) = 0 [pid 7166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7166] memfd_create("syzkaller", 0) = 3 [pid 7166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7166] munmap(0x7f877d82c000, 138412032) = 0 [pid 7166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7166] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7166] close(3) = 0 [pid 7166] mkdir("./file0", 0777) = 0 [ 200.278125][ T7166] loop0: detected capacity change from 0 to 32768 [ 200.292687][ T7166] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7166) [ 200.309493][ T7166] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 200.318761][ T7166] BTRFS info (device loop0): force clearing of disk cache [ 200.325897][ T7166] BTRFS info (device loop0): setting nodatasum [ 200.332057][ T7166] BTRFS info (device loop0): allowing degraded mounts [ 200.338896][ T7166] BTRFS info (device loop0): enabling disk space caching [ 200.346017][ T7166] BTRFS info (device loop0): disk space caching is enabled [ 200.368195][ T7166] BTRFS info (device loop0): enabling ssd optimizations [ 200.375356][ T7166] BTRFS info (device loop0): auto enabling async discard [ 200.383280][ T7166] BTRFS info (device loop0): rebuilding free space tree [ 200.395339][ T7166] BTRFS info (device loop0): disabling free space tree [ 200.402285][ T7166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.411954][ T7166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7166] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7166] chdir("./file0") = 0 [pid 7166] ioctl(4, LOOP_CLR_FD) = 0 [pid 7166] close(4) = 0 [pid 7166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7165] <... futex resumed>) = 0 [pid 7165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] open("./file0", O_RDONLY [pid 7165] <... futex resumed>) = 0 [pid 7166] <... open resumed>) = 4 [ 200.425961][ T7166] BTRFS info (device loop0): checking UUID tree [pid 7165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7165] <... futex resumed>) = 0 [pid 7166] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7166] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7165] <... futex resumed>) = 0 [pid 7166] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7165] <... futex resumed>) = 0 [pid 7165] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7166] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7165] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7165] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7165] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7165] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7165] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[317]}, 88) = 317 [pid 7165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7165] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7165] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7184 attached [pid 7184] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7184] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7184] open("./file0", O_RDONLY) = 5 [pid 7184] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7165] <... futex resumed>) = 0 [pid 7184] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7184] <... futex resumed>) = 0 [pid 7165] <... futex resumed>) = 1 [pid 7184] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 200.510552][ T7166] BTRFS info (device loop0): balance: start -d -m [ 200.522140][ T7166] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 200.549629][ T7166] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7165] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 200.623004][ T7166] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7184] <... ioctl resumed>) = 0 [pid 7184] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7184] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7166] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7166] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] close(3) = 0 [pid 7165] close(4) = 0 [pid 7165] close(5) = 0 [pid 7165] close(6) = -1 EBADF (Bad file descriptor) [pid 7165] close(7) = -1 EBADF (Bad file descriptor) [pid 7165] close(8) = -1 EBADF (Bad file descriptor) [pid 7165] close(9) = -1 EBADF (Bad file descriptor) [pid 7165] close(10) = -1 EBADF (Bad file descriptor) [pid 7165] close(11) = -1 EBADF (Bad file descriptor) [pid 7165] close(12) = -1 EBADF (Bad file descriptor) [pid 7165] close(13) = -1 EBADF (Bad file descriptor) [pid 7165] close(14) = -1 EBADF (Bad file descriptor) [ 200.707963][ T7166] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 200.728365][ T7166] BTRFS info (device loop0): balance: ended with status: 0 [pid 7165] close(15) = -1 EBADF (Bad file descriptor) [pid 7165] close(16) = -1 EBADF (Bad file descriptor) [pid 7165] close(17) = -1 EBADF (Bad file descriptor) [pid 7165] close(18) = -1 EBADF (Bad file descriptor) [pid 7165] close(19) = -1 EBADF (Bad file descriptor) [pid 7165] close(20) = -1 EBADF (Bad file descriptor) [pid 7165] close(21) = -1 EBADF (Bad file descriptor) [pid 7165] close(22) = -1 EBADF (Bad file descriptor) [pid 7165] close(23) = -1 EBADF (Bad file descriptor) [pid 7165] close(24) = -1 EBADF (Bad file descriptor) [pid 7165] close(25) = -1 EBADF (Bad file descriptor) [pid 7165] close(26) = -1 EBADF (Bad file descriptor) [pid 7165] close(27) = -1 EBADF (Bad file descriptor) [pid 7165] close(28) = -1 EBADF (Bad file descriptor) [pid 7165] close(29) = -1 EBADF (Bad file descriptor) [pid 7165] exit_group(0 [pid 7166] <... futex resumed>) = ? [pid 7184] <... futex resumed>) = ? [pid 7184] +++ exited with 0 +++ [pid 7166] +++ exited with 0 +++ [pid 7165] <... exit_group resumed>) = ? [pid 7165] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./104/binderfs") = 0 [pid 5073] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./104/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./104") = 0 [pid 5073] mkdir("./105", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7185 attached [pid 7185] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 318 [pid 7185] <... set_robust_list resumed>) = 0 [pid 7185] chdir("./105") = 0 [pid 7185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7185] setpgid(0, 0) = 0 [pid 7185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7185] write(3, "1000", 4) = 4 [pid 7185] close(3) = 0 [pid 7185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7185] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7185] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7186 attached [pid 7186] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7185] <... clone3 resumed> => {parent_tid=[319]}, 88) = 319 [pid 7186] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 7185] rt_sigprocmask(SIG_SETMASK, [], [pid 7186] rt_sigprocmask(SIG_SETMASK, [], [pid 7185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] memfd_create("syzkaller", 0 [pid 7185] <... futex resumed>) = 0 [pid 7185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7186] <... memfd_create resumed>) = 3 [pid 7186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7186] munmap(0x7f877d82c000, 138412032) = 0 [pid 7186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7186] close(3) = 0 [pid 7186] mkdir("./file0", 0777) = 0 [ 201.406240][ T7186] loop0: detected capacity change from 0 to 32768 [ 201.432171][ T7186] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7186) [ 201.447923][ T7186] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.457204][ T7186] BTRFS info (device loop0): force clearing of disk cache [ 201.464368][ T7186] BTRFS info (device loop0): setting nodatasum [ 201.470531][ T7186] BTRFS info (device loop0): allowing degraded mounts [ 201.477351][ T7186] BTRFS info (device loop0): enabling disk space caching [ 201.484435][ T7186] BTRFS info (device loop0): disk space caching is enabled [ 201.506226][ T7186] BTRFS info (device loop0): enabling ssd optimizations [ 201.513207][ T7186] BTRFS info (device loop0): auto enabling async discard [ 201.521282][ T7186] BTRFS info (device loop0): rebuilding free space tree [ 201.532991][ T7186] BTRFS info (device loop0): disabling free space tree [ 201.540013][ T7186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7186] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7186] chdir("./file0") = 0 [pid 7186] ioctl(4, LOOP_CLR_FD) = 0 [pid 7186] close(4) = 0 [pid 7186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7185] <... futex resumed>) = 0 [pid 7185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7186] open("./file0", O_RDONLY [pid 7185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7186] <... open resumed>) = 4 [pid 7186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7185] <... futex resumed>) = 0 [pid 7185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7185] <... futex resumed>) = 0 [pid 7185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7186] <... futex resumed>) = 0 [pid 7185] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7185] <... futex resumed>) = 0 [ 201.549714][ T7186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.563463][ T7186] BTRFS info (device loop0): checking UUID tree [pid 7185] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7185] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7185] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7204 attached [pid 7204] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7185] <... clone3 resumed> => {parent_tid=[320]}, 88) = 320 [pid 7204] set_robust_list(0x7f8785c2b9a0, 24 [pid 7185] rt_sigprocmask(SIG_SETMASK, [], [pid 7204] <... set_robust_list resumed>) = 0 [pid 7204] rt_sigprocmask(SIG_SETMASK, [], [pid 7185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7204] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7185] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7185] <... futex resumed>) = 0 [pid 7204] open("./file0", O_RDONLY [pid 7185] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] <... open resumed>) = 5 [pid 7204] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7185] <... futex resumed>) = 0 [pid 7185] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7185] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 201.617293][ T7186] BTRFS info (device loop0): balance: start -d -m [ 201.626232][ T7186] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 201.650715][ T7186] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7204] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7204] <... ioctl resumed>) = 0 [pid 7204] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 201.826524][ T7186] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 201.858054][ T7186] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7204] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7186] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7186] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7186] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7185] close(3) = 0 [pid 7185] close(4) = 0 [pid 7185] close(5) = 0 [pid 7185] close(6) = -1 EBADF (Bad file descriptor) [pid 7185] close(7) = -1 EBADF (Bad file descriptor) [pid 7185] close(8) = -1 EBADF (Bad file descriptor) [pid 7185] close(9) = -1 EBADF (Bad file descriptor) [pid 7185] close(10) = -1 EBADF (Bad file descriptor) [pid 7185] close(11) = -1 EBADF (Bad file descriptor) [ 201.877492][ T7186] BTRFS info (device loop0): balance: ended with status: 0 [pid 7185] close(12) = -1 EBADF (Bad file descriptor) [pid 7185] close(13) = -1 EBADF (Bad file descriptor) [pid 7185] close(14) = -1 EBADF (Bad file descriptor) [pid 7185] close(15) = -1 EBADF (Bad file descriptor) [pid 7185] close(16) = -1 EBADF (Bad file descriptor) [pid 7185] close(17) = -1 EBADF (Bad file descriptor) [pid 7185] close(18) = -1 EBADF (Bad file descriptor) [pid 7185] close(19) = -1 EBADF (Bad file descriptor) [pid 7185] close(20) = -1 EBADF (Bad file descriptor) [pid 7185] close(21) = -1 EBADF (Bad file descriptor) [pid 7185] close(22) = -1 EBADF (Bad file descriptor) [pid 7185] close(23) = -1 EBADF (Bad file descriptor) [pid 7185] close(24) = -1 EBADF (Bad file descriptor) [pid 7185] close(25) = -1 EBADF (Bad file descriptor) [pid 7185] close(26) = -1 EBADF (Bad file descriptor) [pid 7185] close(27) = -1 EBADF (Bad file descriptor) [pid 7185] close(28) = -1 EBADF (Bad file descriptor) [pid 7185] close(29) = -1 EBADF (Bad file descriptor) [pid 7185] exit_group(0 [pid 7204] <... futex resumed>) = ? [pid 7186] <... futex resumed>) = ? [pid 7204] +++ exited with 0 +++ [pid 7186] +++ exited with 0 +++ [pid 7185] <... exit_group resumed>) = ? [pid 7185] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./105/binderfs") = 0 [pid 5073] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./105/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./105") = 0 [pid 5073] mkdir("./106", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7205 attached , child_tidptr=0x5555570a9690) = 321 [pid 7205] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7205] chdir("./106") = 0 [pid 7205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7205] setpgid(0, 0) = 0 [pid 7205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7205] write(3, "1000", 4) = 4 [pid 7205] close(3) = 0 [pid 7205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7205] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7205] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7206 attached [pid 7206] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7205] <... clone3 resumed> => {parent_tid=[322]}, 88) = 322 [pid 7206] set_robust_list(0x7f8785c4c9a0, 24 [pid 7205] rt_sigprocmask(SIG_SETMASK, [], [pid 7206] <... set_robust_list resumed>) = 0 [pid 7206] rt_sigprocmask(SIG_SETMASK, [], [pid 7205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] memfd_create("syzkaller", 0 [pid 7205] <... futex resumed>) = 0 [pid 7206] <... memfd_create resumed>) = 3 [pid 7205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7206] munmap(0x7f877d82c000, 138412032) = 0 [pid 7206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7206] close(3) = 0 [pid 7206] mkdir("./file0", 0777) = 0 [ 202.498399][ T7206] loop0: detected capacity change from 0 to 32768 [ 202.524586][ T7206] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7206) [ 202.540466][ T7206] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 202.549735][ T7206] BTRFS info (device loop0): force clearing of disk cache [ 202.556904][ T7206] BTRFS info (device loop0): setting nodatasum [ 202.563070][ T7206] BTRFS info (device loop0): allowing degraded mounts [ 202.569883][ T7206] BTRFS info (device loop0): enabling disk space caching [ 202.576930][ T7206] BTRFS info (device loop0): disk space caching is enabled [ 202.599446][ T7206] BTRFS info (device loop0): enabling ssd optimizations [ 202.606710][ T7206] BTRFS info (device loop0): auto enabling async discard [ 202.615042][ T7206] BTRFS info (device loop0): rebuilding free space tree [ 202.627075][ T7206] BTRFS info (device loop0): disabling free space tree [ 202.634025][ T7206] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7206] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7206] chdir("./file0") = 0 [pid 7206] ioctl(4, LOOP_CLR_FD) = 0 [pid 7206] close(4) = 0 [pid 7206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7205] <... futex resumed>) = 0 [pid 7206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7205] <... futex resumed>) = 0 [pid 7206] open("./file0", O_RDONLY [pid 7205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7206] <... open resumed>) = 4 [pid 7206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7205] <... futex resumed>) = 0 [pid 7206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7205] <... futex resumed>) = 0 [pid 7206] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7206] <... ioctl resumed>) = 0 [ 202.643651][ T7206] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.657067][ T7206] BTRFS info (device loop0): checking UUID tree [pid 7206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] <... futex resumed>) = 0 [pid 7205] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7206] <... futex resumed>) = 0 [pid 7206] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7205] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7205] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7205] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7224 attached => {parent_tid=[323]}, 88) = 323 [pid 7205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7205] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7205] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7224] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7224] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7224] open("./file0", O_RDONLY) = 5 [pid 7224] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7205] <... futex resumed>) = 0 [pid 7224] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7205] <... futex resumed>) = 0 [pid 7224] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 202.728192][ T7206] BTRFS info (device loop0): balance: start -d -m [ 202.739283][ T7206] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 202.763841][ T7206] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7205] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7224] <... ioctl resumed>) = 0 [pid 7224] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 202.921603][ T7206] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 202.945914][ T7206] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7224] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7206] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] close(3) = 0 [pid 7206] <... futex resumed>) = 0 [pid 7205] close(4) = 0 [pid 7206] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] close(5) = 0 [pid 7205] close(6) = -1 EBADF (Bad file descriptor) [pid 7205] close(7) = -1 EBADF (Bad file descriptor) [pid 7205] close(8) = -1 EBADF (Bad file descriptor) [pid 7205] close(9) = -1 EBADF (Bad file descriptor) [ 202.965297][ T7206] BTRFS info (device loop0): balance: ended with status: 0 [pid 7205] close(10) = -1 EBADF (Bad file descriptor) [pid 7205] close(11) = -1 EBADF (Bad file descriptor) [pid 7205] close(12) = -1 EBADF (Bad file descriptor) [pid 7205] close(13) = -1 EBADF (Bad file descriptor) [pid 7205] close(14) = -1 EBADF (Bad file descriptor) [pid 7205] close(15) = -1 EBADF (Bad file descriptor) [pid 7205] close(16) = -1 EBADF (Bad file descriptor) [pid 7205] close(17) = -1 EBADF (Bad file descriptor) [pid 7205] close(18) = -1 EBADF (Bad file descriptor) [pid 7205] close(19) = -1 EBADF (Bad file descriptor) [pid 7205] close(20) = -1 EBADF (Bad file descriptor) [pid 7205] close(21) = -1 EBADF (Bad file descriptor) [pid 7205] close(22) = -1 EBADF (Bad file descriptor) [pid 7205] close(23) = -1 EBADF (Bad file descriptor) [pid 7205] close(24) = -1 EBADF (Bad file descriptor) [pid 7205] close(25) = -1 EBADF (Bad file descriptor) [pid 7205] close(26) = -1 EBADF (Bad file descriptor) [pid 7205] close(27) = -1 EBADF (Bad file descriptor) [pid 7205] close(28) = -1 EBADF (Bad file descriptor) [pid 7205] close(29) = -1 EBADF (Bad file descriptor) [pid 7205] exit_group(0 [pid 7224] <... futex resumed>) = ? [pid 7206] <... futex resumed>) = ? [pid 7205] <... exit_group resumed>) = ? [pid 7224] +++ exited with 0 +++ [pid 7206] +++ exited with 0 +++ [pid 7205] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./106/binderfs") = 0 [pid 5073] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./106/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./106") = 0 [pid 5073] mkdir("./107", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7225 attached [pid 7225] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 324 [pid 7225] <... set_robust_list resumed>) = 0 [pid 7225] chdir("./107") = 0 [pid 7225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7225] setpgid(0, 0) = 0 [pid 7225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7225] write(3, "1000", 4) = 4 [pid 7225] close(3) = 0 [pid 7225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7225] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7225] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7226 attached [pid 7226] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7225] <... clone3 resumed> => {parent_tid=[325]}, 88) = 325 [pid 7226] <... rseq resumed>) = 0 [pid 7225] rt_sigprocmask(SIG_SETMASK, [], [pid 7226] set_robust_list(0x7f8785c4c9a0, 24 [pid 7225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7226] <... set_robust_list resumed>) = 0 [pid 7225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] rt_sigprocmask(SIG_SETMASK, [], [pid 7225] <... futex resumed>) = 0 [pid 7226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7226] memfd_create("syzkaller", 0) = 3 [pid 7226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7226] munmap(0x7f877d82c000, 138412032) = 0 [pid 7226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7226] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7226] close(3) = 0 [pid 7226] mkdir("./file0", 0777) = 0 [ 203.590069][ T7226] loop0: detected capacity change from 0 to 32768 [ 203.604960][ T7226] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7226) [ 203.620290][ T7226] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 203.629913][ T7226] BTRFS info (device loop0): force clearing of disk cache [ 203.637074][ T7226] BTRFS info (device loop0): setting nodatasum [ 203.643357][ T7226] BTRFS info (device loop0): allowing degraded mounts [ 203.650595][ T7226] BTRFS info (device loop0): enabling disk space caching [ 203.657684][ T7226] BTRFS info (device loop0): disk space caching is enabled [ 203.679644][ T7226] BTRFS info (device loop0): enabling ssd optimizations [ 203.686670][ T7226] BTRFS info (device loop0): auto enabling async discard [ 203.695162][ T7226] BTRFS info (device loop0): rebuilding free space tree [ 203.707029][ T7226] BTRFS info (device loop0): disabling free space tree [ 203.713978][ T7226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.723607][ T7226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7226] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7226] chdir("./file0") = 0 [pid 7226] ioctl(4, LOOP_CLR_FD) = 0 [pid 7226] close(4) = 0 [pid 7226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7225] <... futex resumed>) = 0 [pid 7225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] open("./file0", O_RDONLY) = 4 [pid 7226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = 0 [ 203.737446][ T7226] BTRFS info (device loop0): checking UUID tree [pid 7226] <... futex resumed>) = 1 [pid 7225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7226] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] <... ioctl resumed>) = 0 [pid 7226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7225] <... futex resumed>) = 0 [pid 7226] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7225] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7225] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7225] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7225] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[326]}, 88) = 326 [pid 7225] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7244 attached [pid 7244] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7244] <... rseq resumed>) = 0 [pid 7244] set_robust_list(0x7f8785c2b9a0, 24 [pid 7225] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] <... set_robust_list resumed>) = 0 [pid 7244] rt_sigprocmask(SIG_SETMASK, [], [pid 7225] <... futex resumed>) = 0 [pid 7244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7225] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7244] open("./file0", O_RDONLY) = 5 [pid 7244] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7225] <... futex resumed>) = 0 [pid 7244] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7225] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7225] <... futex resumed>) = 0 [pid 7244] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 203.798983][ T7226] BTRFS info (device loop0): balance: start -d -m [ 203.807314][ T7226] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 203.833131][ T7226] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7225] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 203.916284][ T7226] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7244] <... ioctl resumed>) = 0 [pid 7244] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7244] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7226] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7226] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7226] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7225] close(3) = 0 [pid 7225] close(4) = 0 [pid 7225] close(5) = 0 [pid 7225] close(6) = -1 EBADF (Bad file descriptor) [pid 7225] close(7) = -1 EBADF (Bad file descriptor) [pid 7225] close(8) = -1 EBADF (Bad file descriptor) [pid 7225] close(9) = -1 EBADF (Bad file descriptor) [pid 7225] close(10) = -1 EBADF (Bad file descriptor) [pid 7225] close(11) = -1 EBADF (Bad file descriptor) [pid 7225] close(12) = -1 EBADF (Bad file descriptor) [ 204.027239][ T7226] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 204.047016][ T7226] BTRFS info (device loop0): balance: ended with status: 0 [pid 7225] close(13) = -1 EBADF (Bad file descriptor) [pid 7225] close(14) = -1 EBADF (Bad file descriptor) [pid 7225] close(15) = -1 EBADF (Bad file descriptor) [pid 7225] close(16) = -1 EBADF (Bad file descriptor) [pid 7225] close(17) = -1 EBADF (Bad file descriptor) [pid 7225] close(18) = -1 EBADF (Bad file descriptor) [pid 7225] close(19) = -1 EBADF (Bad file descriptor) [pid 7225] close(20) = -1 EBADF (Bad file descriptor) [pid 7225] close(21) = -1 EBADF (Bad file descriptor) [pid 7225] close(22) = -1 EBADF (Bad file descriptor) [pid 7225] close(23) = -1 EBADF (Bad file descriptor) [pid 7225] close(24) = -1 EBADF (Bad file descriptor) [pid 7225] close(25) = -1 EBADF (Bad file descriptor) [pid 7225] close(26) = -1 EBADF (Bad file descriptor) [pid 7225] close(27) = -1 EBADF (Bad file descriptor) [pid 7225] close(28) = -1 EBADF (Bad file descriptor) [pid 7225] close(29) = -1 EBADF (Bad file descriptor) [pid 7225] exit_group(0 [pid 7244] <... futex resumed>) = ? [pid 7226] <... futex resumed>) = ? [pid 7225] <... exit_group resumed>) = ? [pid 7244] +++ exited with 0 +++ [pid 7226] +++ exited with 0 +++ [pid 7225] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./107/binderfs") = 0 [pid 5073] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./107/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./107") = 0 [pid 5073] mkdir("./108", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7245 attached [pid 7245] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 327 [pid 7245] chdir("./108") = 0 [pid 7245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7245] setpgid(0, 0) = 0 [pid 7245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7245] write(3, "1000", 4) = 4 [pid 7245] close(3) = 0 [pid 7245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7245] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7245] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7246 attached [pid 7246] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7245] <... clone3 resumed> => {parent_tid=[328]}, 88) = 328 [pid 7246] <... rseq resumed>) = 0 [pid 7245] rt_sigprocmask(SIG_SETMASK, [], [pid 7246] set_robust_list(0x7f8785c4c9a0, 24 [pid 7245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7246] <... set_robust_list resumed>) = 0 [pid 7245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7245] <... futex resumed>) = 0 [pid 7246] memfd_create("syzkaller", 0 [pid 7245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7246] <... memfd_create resumed>) = 3 [pid 7246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7246] munmap(0x7f877d82c000, 138412032) = 0 [pid 7246] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7246] close(3) = 0 [pid 7246] mkdir("./file0", 0777) = 0 [ 204.693843][ T7246] loop0: detected capacity change from 0 to 32768 [ 204.708494][ T7246] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7246) [ 204.723544][ T7246] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 204.732839][ T7246] BTRFS info (device loop0): force clearing of disk cache [ 204.739990][ T7246] BTRFS info (device loop0): setting nodatasum [ 204.746493][ T7246] BTRFS info (device loop0): allowing degraded mounts [ 204.753304][ T7246] BTRFS info (device loop0): enabling disk space caching [ 204.760366][ T7246] BTRFS info (device loop0): disk space caching is enabled [ 204.782082][ T7246] BTRFS info (device loop0): enabling ssd optimizations [ 204.789072][ T7246] BTRFS info (device loop0): auto enabling async discard [ 204.797645][ T7246] BTRFS info (device loop0): rebuilding free space tree [ 204.809476][ T7246] BTRFS info (device loop0): disabling free space tree [ 204.816438][ T7246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.826109][ T7246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7246] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7246] chdir("./file0") = 0 [pid 7246] ioctl(4, LOOP_CLR_FD) = 0 [pid 7246] close(4) = 0 [pid 7246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7246] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] <... futex resumed>) = 0 [pid 7245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] <... futex resumed>) = 0 [pid 7245] <... futex resumed>) = 1 [pid 7246] open("./file0", O_RDONLY [pid 7245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7246] <... open resumed>) = 4 [pid 7246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] <... futex resumed>) = 0 [pid 7246] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7245] <... futex resumed>) = 0 [pid 7246] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7246] <... ioctl resumed>) = 0 [ 204.839429][ T7246] BTRFS info (device loop0): checking UUID tree [pid 7246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] <... futex resumed>) = 0 [pid 7245] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7246] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7245] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7245] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7245] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[329]}, 88) = 329 ./strace-static-x86_64: Process 7264 attached [pid 7264] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7264] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7264] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7245] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7264] <... futex resumed>) = 0 [pid 7245] <... futex resumed>) = 1 [pid 7264] open("./file0", O_RDONLY [pid 7245] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7264] <... open resumed>) = 5 [pid 7264] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] <... futex resumed>) = 0 [pid 7264] <... futex resumed>) = 1 [pid 7245] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 204.891033][ T7246] BTRFS info (device loop0): balance: start -d -m [ 204.902508][ T7246] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 204.927635][ T7246] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7245] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7264] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 204.979376][ T7246] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7264] <... ioctl resumed>) = 0 [pid 7264] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7264] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7246] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7246] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7246] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] close(3) = 0 [pid 7245] close(4) = 0 [pid 7245] close(5) = 0 [pid 7245] close(6) = -1 EBADF (Bad file descriptor) [pid 7245] close(7) = -1 EBADF (Bad file descriptor) [pid 7245] close(8) = -1 EBADF (Bad file descriptor) [pid 7245] close(9) = -1 EBADF (Bad file descriptor) [pid 7245] close(10) = -1 EBADF (Bad file descriptor) [pid 7245] close(11) = -1 EBADF (Bad file descriptor) [pid 7245] close(12) = -1 EBADF (Bad file descriptor) [pid 7245] close(13) = -1 EBADF (Bad file descriptor) [pid 7245] close(14) = -1 EBADF (Bad file descriptor) [pid 7245] close(15) = -1 EBADF (Bad file descriptor) [pid 7245] close(16) = -1 EBADF (Bad file descriptor) [pid 7245] close(17) = -1 EBADF (Bad file descriptor) [pid 7245] close(18) = -1 EBADF (Bad file descriptor) [pid 7245] close(19) = -1 EBADF (Bad file descriptor) [ 205.170487][ T7246] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 205.197184][ T7246] BTRFS info (device loop0): balance: ended with status: 0 [pid 7245] close(20) = -1 EBADF (Bad file descriptor) [pid 7245] close(21) = -1 EBADF (Bad file descriptor) [pid 7245] close(22) = -1 EBADF (Bad file descriptor) [pid 7245] close(23) = -1 EBADF (Bad file descriptor) [pid 7245] close(24) = -1 EBADF (Bad file descriptor) [pid 7245] close(25) = -1 EBADF (Bad file descriptor) [pid 7245] close(26) = -1 EBADF (Bad file descriptor) [pid 7245] close(27) = -1 EBADF (Bad file descriptor) [pid 7245] close(28) = -1 EBADF (Bad file descriptor) [pid 7245] close(29) = -1 EBADF (Bad file descriptor) [pid 7245] exit_group(0 [pid 7246] <... futex resumed>) = ? [pid 7245] <... exit_group resumed>) = ? [pid 7264] <... futex resumed>) = ? [pid 7246] +++ exited with 0 +++ [pid 7264] +++ exited with 0 +++ [pid 7245] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./108/binderfs") = 0 [pid 5073] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./108/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./108") = 0 [pid 5073] mkdir("./109", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570a9690) = 330 ./strace-static-x86_64: Process 7265 attached [pid 7265] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7265] chdir("./109") = 0 [pid 7265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7265] setpgid(0, 0) = 0 [pid 7265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7265] write(3, "1000", 4) = 4 [pid 7265] close(3) = 0 [pid 7265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7265] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7265] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7266 attached => {parent_tid=[331]}, 88) = 331 [pid 7265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7266] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7266] set_robust_list(0x7f8785c4c9a0, 24 [pid 7265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7266] <... set_robust_list resumed>) = 0 [pid 7266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7266] memfd_create("syzkaller", 0) = 3 [pid 7266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7266] munmap(0x7f877d82c000, 138412032) = 0 [pid 7266] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7266] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7266] close(3) = 0 [pid 7266] mkdir("./file0", 0777) = 0 [ 205.900989][ T7266] loop0: detected capacity change from 0 to 32768 [ 205.925975][ T7266] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7266) [ 205.941094][ T7266] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 205.950386][ T7266] BTRFS info (device loop0): force clearing of disk cache [ 205.957550][ T7266] BTRFS info (device loop0): setting nodatasum [ 205.963716][ T7266] BTRFS info (device loop0): allowing degraded mounts [ 205.970585][ T7266] BTRFS info (device loop0): enabling disk space caching [ 205.977644][ T7266] BTRFS info (device loop0): disk space caching is enabled [ 205.999849][ T7266] BTRFS info (device loop0): enabling ssd optimizations [ 206.006865][ T7266] BTRFS info (device loop0): auto enabling async discard [ 206.014867][ T7266] BTRFS info (device loop0): rebuilding free space tree [ 206.026895][ T7266] BTRFS info (device loop0): disabling free space tree [ 206.034069][ T7266] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7266] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7266] chdir("./file0") = 0 [pid 7266] ioctl(4, LOOP_CLR_FD) = 0 [pid 7266] close(4) = 0 [pid 7266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7265] <... futex resumed>) = 0 [pid 7266] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7266] <... futex resumed>) = 0 [pid 7265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 206.043718][ T7266] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.056978][ T7266] BTRFS info (device loop0): checking UUID tree [pid 7266] open("./file0", O_RDONLY) = 4 [pid 7266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7266] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] <... futex resumed>) = 0 [pid 7265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7266] <... futex resumed>) = 0 [pid 7265] <... futex resumed>) = 1 [pid 7266] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7266] <... ioctl resumed>) = 0 [pid 7266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7265] <... futex resumed>) = 0 [pid 7266] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7265] <... futex resumed>) = 0 [pid 7266] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 206.142673][ T7266] BTRFS info (device loop0): balance: start -d -m [ 206.153186][ T7266] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7265] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7265] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7265] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[332]}, 88) = 332 [pid 7265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7265] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7284 attached [pid 7284] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7284] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7284] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7284] open("./file0", O_RDONLY) = 5 [pid 7284] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7265] <... futex resumed>) = 0 [pid 7284] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7265] <... futex resumed>) = 0 [pid 7284] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 206.183255][ T7266] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7265] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7284] <... ioctl resumed>) = 0 [pid 7284] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 206.321335][ T7266] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 206.346182][ T7266] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7284] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7266] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7266] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7266] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] close(3) = 0 [pid 7265] close(4) = 0 [pid 7265] close(5) = 0 [pid 7265] close(6) = -1 EBADF (Bad file descriptor) [pid 7265] close(7) = -1 EBADF (Bad file descriptor) [pid 7265] close(8) = -1 EBADF (Bad file descriptor) [pid 7265] close(9) = -1 EBADF (Bad file descriptor) [pid 7265] close(10) = -1 EBADF (Bad file descriptor) [pid 7265] close(11) = -1 EBADF (Bad file descriptor) [pid 7265] close(12) = -1 EBADF (Bad file descriptor) [pid 7265] close(13) = -1 EBADF (Bad file descriptor) [pid 7265] close(14) = -1 EBADF (Bad file descriptor) [pid 7265] close(15) = -1 EBADF (Bad file descriptor) [pid 7265] close(16) = -1 EBADF (Bad file descriptor) [pid 7265] close(17) = -1 EBADF (Bad file descriptor) [pid 7265] close(18) = -1 EBADF (Bad file descriptor) [pid 7265] close(19) = -1 EBADF (Bad file descriptor) [pid 7265] close(20) = -1 EBADF (Bad file descriptor) [pid 7265] close(21) = -1 EBADF (Bad file descriptor) [pid 7265] close(22) = -1 EBADF (Bad file descriptor) [ 206.365098][ T7266] BTRFS info (device loop0): balance: ended with status: 0 [pid 7265] close(23) = -1 EBADF (Bad file descriptor) [pid 7265] close(24) = -1 EBADF (Bad file descriptor) [pid 7265] close(25) = -1 EBADF (Bad file descriptor) [pid 7265] close(26) = -1 EBADF (Bad file descriptor) [pid 7265] close(27) = -1 EBADF (Bad file descriptor) [pid 7265] close(28) = -1 EBADF (Bad file descriptor) [pid 7265] close(29) = -1 EBADF (Bad file descriptor) [pid 7265] exit_group(0 [pid 7284] <... futex resumed>) = ? [pid 7266] <... futex resumed>) = ? [pid 7265] <... exit_group resumed>) = ? [pid 7284] +++ exited with 0 +++ [pid 7266] +++ exited with 0 +++ [pid 7265] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./109/binderfs") = 0 [pid 5073] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./109/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./109") = 0 [pid 5073] mkdir("./110", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7285 attached [pid 7285] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 333 [pid 7285] <... set_robust_list resumed>) = 0 [pid 7285] chdir("./110") = 0 [pid 7285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7285] setpgid(0, 0) = 0 [pid 7285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7285] write(3, "1000", 4) = 4 [pid 7285] close(3) = 0 [pid 7285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7285] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7285] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7286 attached [pid 7286] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7286] set_robust_list(0x7f8785c4c9a0, 24 [pid 7285] <... clone3 resumed> => {parent_tid=[334]}, 88) = 334 [pid 7286] <... set_robust_list resumed>) = 0 [pid 7286] rt_sigprocmask(SIG_SETMASK, [], [pid 7285] rt_sigprocmask(SIG_SETMASK, [], [pid 7286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7285] <... futex resumed>) = 0 [pid 7285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7286] memfd_create("syzkaller", 0) = 3 [pid 7286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7286] munmap(0x7f877d82c000, 138412032) = 0 [pid 7286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7286] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7286] close(3) = 0 [pid 7286] mkdir("./file0", 0777) = 0 [ 206.936835][ T7286] loop0: detected capacity change from 0 to 32768 [ 206.950457][ T7286] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7286) [ 206.966813][ T7286] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 206.976154][ T7286] BTRFS info (device loop0): force clearing of disk cache [ 206.983253][ T7286] BTRFS info (device loop0): setting nodatasum [ 206.989436][ T7286] BTRFS info (device loop0): allowing degraded mounts [ 206.996245][ T7286] BTRFS info (device loop0): enabling disk space caching [ 207.003259][ T7286] BTRFS info (device loop0): disk space caching is enabled [ 207.024877][ T7286] BTRFS info (device loop0): enabling ssd optimizations [ 207.031828][ T7286] BTRFS info (device loop0): auto enabling async discard [ 207.039836][ T7286] BTRFS info (device loop0): rebuilding free space tree [ 207.051731][ T7286] BTRFS info (device loop0): disabling free space tree [ 207.058687][ T7286] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 207.068375][ T7286] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7286] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7286] chdir("./file0") = 0 [pid 7286] ioctl(4, LOOP_CLR_FD) = 0 [pid 7286] close(4) = 0 [pid 7286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7285] <... futex resumed>) = 0 [ 207.081568][ T7286] BTRFS info (device loop0): checking UUID tree [pid 7286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] open("./file0", O_RDONLY [pid 7285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7286] <... open resumed>) = 4 [pid 7286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] <... futex resumed>) = 0 [pid 7285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7286] <... futex resumed>) = 0 [pid 7285] <... futex resumed>) = 1 [pid 7286] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] <... futex resumed>) = 0 [pid 7285] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7285] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7286] <... futex resumed>) = 0 [pid 7286] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7285] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7285] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7304 attached => {parent_tid=[335]}, 88) = 335 [pid 7285] rt_sigprocmask(SIG_SETMASK, [], [pid 7304] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7285] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7285] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7304] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7304] open("./file0", O_RDONLY) = 5 [pid 7304] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7285] <... futex resumed>) = 0 [pid 7304] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7285] <... futex resumed>) = 0 [pid 7304] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 207.162637][ T7286] BTRFS info (device loop0): balance: start -d -m [ 207.170903][ T7286] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 207.201322][ T7286] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7285] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7304] <... ioctl resumed>) = 0 [pid 7304] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 207.360538][ T7286] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 207.385282][ T7286] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7304] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7286] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7285] close(3) = 0 [pid 7285] close(4) = 0 [pid 7285] close(5) = 0 [pid 7285] close(6) = -1 EBADF (Bad file descriptor) [pid 7285] close(7) = -1 EBADF (Bad file descriptor) [ 207.405024][ T7286] BTRFS info (device loop0): balance: ended with status: 0 [pid 7285] close(8) = -1 EBADF (Bad file descriptor) [pid 7285] close(9) = -1 EBADF (Bad file descriptor) [pid 7285] close(10) = -1 EBADF (Bad file descriptor) [pid 7285] close(11) = -1 EBADF (Bad file descriptor) [pid 7285] close(12) = -1 EBADF (Bad file descriptor) [pid 7285] close(13) = -1 EBADF (Bad file descriptor) [pid 7285] close(14) = -1 EBADF (Bad file descriptor) [pid 7285] close(15) = -1 EBADF (Bad file descriptor) [pid 7285] close(16) = -1 EBADF (Bad file descriptor) [pid 7285] close(17) = -1 EBADF (Bad file descriptor) [pid 7285] close(18) = -1 EBADF (Bad file descriptor) [pid 7285] close(19) = -1 EBADF (Bad file descriptor) [pid 7285] close(20) = -1 EBADF (Bad file descriptor) [pid 7285] close(21) = -1 EBADF (Bad file descriptor) [pid 7285] close(22) = -1 EBADF (Bad file descriptor) [pid 7285] close(23) = -1 EBADF (Bad file descriptor) [pid 7285] close(24) = -1 EBADF (Bad file descriptor) [pid 7285] close(25) = -1 EBADF (Bad file descriptor) [pid 7285] close(26) = -1 EBADF (Bad file descriptor) [pid 7285] close(27) = -1 EBADF (Bad file descriptor) [pid 7285] close(28) = -1 EBADF (Bad file descriptor) [pid 7285] close(29) = -1 EBADF (Bad file descriptor) [pid 7285] exit_group(0 [pid 7304] <... futex resumed>) = ? [pid 7286] <... futex resumed>) = ? [pid 7285] <... exit_group resumed>) = ? [pid 7304] +++ exited with 0 +++ [pid 7286] +++ exited with 0 +++ [pid 7285] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./110/binderfs") = 0 [pid 5073] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./110/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./110") = 0 [pid 5073] mkdir("./111", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7305 attached [pid 7305] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 336 [pid 7305] chdir("./111") = 0 [pid 7305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7305] setpgid(0, 0) = 0 [pid 7305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7305] write(3, "1000", 4) = 4 [pid 7305] close(3) = 0 [pid 7305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7305] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7305] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7306 attached => {parent_tid=[337]}, 88) = 337 [pid 7306] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7305] rt_sigprocmask(SIG_SETMASK, [], [pid 7306] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 7305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7306] memfd_create("syzkaller", 0 [pid 7305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7306] <... memfd_create resumed>) = 3 [pid 7306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7306] munmap(0x7f877d82c000, 138412032) = 0 [pid 7306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7306] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7306] close(3) = 0 [pid 7306] mkdir("./file0", 0777) = 0 [ 207.947193][ T7306] loop0: detected capacity change from 0 to 32768 [ 207.971478][ T7306] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7306) [ 207.988846][ T7306] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 207.998140][ T7306] BTRFS info (device loop0): force clearing of disk cache [ 208.005276][ T7306] BTRFS info (device loop0): setting nodatasum [ 208.011420][ T7306] BTRFS info (device loop0): allowing degraded mounts [ 208.018220][ T7306] BTRFS info (device loop0): enabling disk space caching [ 208.025302][ T7306] BTRFS info (device loop0): disk space caching is enabled [ 208.047798][ T7306] BTRFS info (device loop0): enabling ssd optimizations [ 208.054921][ T7306] BTRFS info (device loop0): auto enabling async discard [ 208.063249][ T7306] BTRFS info (device loop0): rebuilding free space tree [ 208.075904][ T7306] BTRFS info (device loop0): disabling free space tree [ 208.082797][ T7306] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7306] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7306] chdir("./file0") = 0 [pid 7306] ioctl(4, LOOP_CLR_FD) = 0 [pid 7306] close(4) = 0 [pid 7306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7305] <... futex resumed>) = 0 [pid 7305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7306] open("./file0", O_RDONLY) = 4 [pid 7306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7305] <... futex resumed>) = 0 [pid 7306] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7306] <... futex resumed>) = 0 [pid 7306] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7306] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 208.092546][ T7306] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.105774][ T7306] BTRFS info (device loop0): checking UUID tree [pid 7305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7305] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7306] <... futex resumed>) = 0 [pid 7305] <... futex resumed>) = 1 [pid 7306] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7305] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7305] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7305] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[338]}, 88) = 338 ./strace-static-x86_64: Process 7324 attached [pid 7305] rt_sigprocmask(SIG_SETMASK, [], [pid 7324] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7324] <... rseq resumed>) = 0 [pid 7324] set_robust_list(0x7f8785c2b9a0, 24 [pid 7305] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... set_robust_list resumed>) = 0 [pid 7305] <... futex resumed>) = 0 [pid 7324] rt_sigprocmask(SIG_SETMASK, [], [pid 7305] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7324] open("./file0", O_RDONLY) = 5 [pid 7324] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7305] <... futex resumed>) = 0 [pid 7324] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7305] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7305] <... futex resumed>) = 0 [pid 7324] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 208.168891][ T7306] BTRFS info (device loop0): balance: start -d -m [ 208.180078][ T7306] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 208.205821][ T7306] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7305] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 208.323641][ T7306] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7324] <... ioctl resumed>) = 0 [pid 7324] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7324] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7306] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7306] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7306] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7305] close(3) = 0 [pid 7305] close(4) = 0 [pid 7305] close(5) = 0 [pid 7305] close(6) = -1 EBADF (Bad file descriptor) [pid 7305] close(7) = -1 EBADF (Bad file descriptor) [pid 7305] close(8) = -1 EBADF (Bad file descriptor) [pid 7305] close(9) = -1 EBADF (Bad file descriptor) [pid 7305] close(10) = -1 EBADF (Bad file descriptor) [pid 7305] close(11) = -1 EBADF (Bad file descriptor) [pid 7305] close(12) = -1 EBADF (Bad file descriptor) [pid 7305] close(13) = -1 EBADF (Bad file descriptor) [pid 7305] close(14) = -1 EBADF (Bad file descriptor) [pid 7305] close(15) = -1 EBADF (Bad file descriptor) [pid 7305] close(16) = -1 EBADF (Bad file descriptor) [ 208.400424][ T7306] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 208.420888][ T7306] BTRFS info (device loop0): balance: ended with status: 0 [pid 7305] close(17) = -1 EBADF (Bad file descriptor) [pid 7305] close(18) = -1 EBADF (Bad file descriptor) [pid 7305] close(19) = -1 EBADF (Bad file descriptor) [pid 7305] close(20) = -1 EBADF (Bad file descriptor) [pid 7305] close(21) = -1 EBADF (Bad file descriptor) [pid 7305] close(22) = -1 EBADF (Bad file descriptor) [pid 7305] close(23) = -1 EBADF (Bad file descriptor) [pid 7305] close(24) = -1 EBADF (Bad file descriptor) [pid 7305] close(25) = -1 EBADF (Bad file descriptor) [pid 7305] close(26) = -1 EBADF (Bad file descriptor) [pid 7305] close(27) = -1 EBADF (Bad file descriptor) [pid 7305] close(28) = -1 EBADF (Bad file descriptor) [pid 7305] close(29) = -1 EBADF (Bad file descriptor) [pid 7305] exit_group(0 [pid 7324] <... futex resumed>) = ? [pid 7324] +++ exited with 0 +++ [pid 7306] <... futex resumed>) = ? [pid 7305] <... exit_group resumed>) = ? [pid 7306] +++ exited with 0 +++ [pid 7305] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./111/binderfs") = 0 [pid 5073] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./111/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./111") = 0 [pid 5073] mkdir("./112", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7325 attached , child_tidptr=0x5555570a9690) = 339 [pid 7325] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7325] chdir("./112") = 0 [pid 7325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7325] setpgid(0, 0) = 0 [pid 7325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7325] write(3, "1000", 4) = 4 [pid 7325] close(3) = 0 [pid 7325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7325] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7325] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7326 attached [pid 7326] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7325] <... clone3 resumed> => {parent_tid=[340]}, 88) = 340 [pid 7326] <... rseq resumed>) = 0 [pid 7325] rt_sigprocmask(SIG_SETMASK, [], [pid 7326] set_robust_list(0x7f8785c4c9a0, 24 [pid 7325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7326] <... set_robust_list resumed>) = 0 [pid 7325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7325] <... futex resumed>) = 0 [pid 7326] memfd_create("syzkaller", 0 [pid 7325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7326] <... memfd_create resumed>) = 3 [pid 7326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7326] munmap(0x7f877d82c000, 138412032) = 0 [pid 7326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7326] close(3) = 0 [pid 7326] mkdir("./file0", 0777) = 0 [ 209.011875][ T7326] loop0: detected capacity change from 0 to 32768 [ 209.035923][ T7326] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7326) [ 209.050947][ T7326] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.060238][ T7326] BTRFS info (device loop0): force clearing of disk cache [ 209.067462][ T7326] BTRFS info (device loop0): setting nodatasum [ 209.073626][ T7326] BTRFS info (device loop0): allowing degraded mounts [ 209.080676][ T7326] BTRFS info (device loop0): enabling disk space caching [ 209.087752][ T7326] BTRFS info (device loop0): disk space caching is enabled [ 209.109466][ T7326] BTRFS info (device loop0): enabling ssd optimizations [ 209.116469][ T7326] BTRFS info (device loop0): auto enabling async discard [ 209.124643][ T7326] BTRFS info (device loop0): rebuilding free space tree [ 209.137963][ T7326] BTRFS info (device loop0): disabling free space tree [ 209.144902][ T7326] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7326] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7326] chdir("./file0") = 0 [pid 7326] ioctl(4, LOOP_CLR_FD) = 0 [pid 7326] close(4) = 0 [pid 7326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [ 209.154572][ T7326] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.167543][ T7326] BTRFS info (device loop0): checking UUID tree [pid 7326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... futex resumed>) = 0 [pid 7325] <... futex resumed>) = 1 [pid 7326] open("./file0", O_RDONLY [pid 7325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] <... open resumed>) = 4 [pid 7326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] <... futex resumed>) = 0 [pid 7325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... futex resumed>) = 0 [pid 7325] <... futex resumed>) = 1 [pid 7326] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] <... ioctl resumed>) = 0 [pid 7326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [pid 7326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7325] <... futex resumed>) = 0 [pid 7326] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7325] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7325] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7325] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[341]}, 88) = 341 [pid 7325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7325] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7344 attached [pid 7344] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7344] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7344] open("./file0", O_RDONLY) = 5 [pid 7344] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [pid 7344] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... futex resumed>) = 0 [pid 7325] <... futex resumed>) = 1 [pid 7344] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 209.249596][ T7326] BTRFS info (device loop0): balance: start -d -m [ 209.258241][ T7326] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 209.287586][ T7326] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7325] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7325] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7325] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7344] <... ioctl resumed>) = 0 [pid 7344] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 209.433635][ T7326] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 209.458732][ T7326] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7344] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7326] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7326] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7326] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] close(3) = 0 [pid 7325] close(4) = 0 [pid 7325] close(5) = 0 [pid 7325] close(6) = -1 EBADF (Bad file descriptor) [pid 7325] close(7) = -1 EBADF (Bad file descriptor) [pid 7325] close(8) = -1 EBADF (Bad file descriptor) [pid 7325] close(9) = -1 EBADF (Bad file descriptor) [pid 7325] close(10) = -1 EBADF (Bad file descriptor) [ 209.478165][ T7326] BTRFS info (device loop0): balance: ended with status: 0 [pid 7325] close(11) = -1 EBADF (Bad file descriptor) [pid 7325] close(12) = -1 EBADF (Bad file descriptor) [pid 7325] close(13) = -1 EBADF (Bad file descriptor) [pid 7325] close(14) = -1 EBADF (Bad file descriptor) [pid 7325] close(15) = -1 EBADF (Bad file descriptor) [pid 7325] close(16) = -1 EBADF (Bad file descriptor) [pid 7325] close(17) = -1 EBADF (Bad file descriptor) [pid 7325] close(18) = -1 EBADF (Bad file descriptor) [pid 7325] close(19) = -1 EBADF (Bad file descriptor) [pid 7325] close(20) = -1 EBADF (Bad file descriptor) [pid 7325] close(21) = -1 EBADF (Bad file descriptor) [pid 7325] close(22) = -1 EBADF (Bad file descriptor) [pid 7325] close(23) = -1 EBADF (Bad file descriptor) [pid 7325] close(24) = -1 EBADF (Bad file descriptor) [pid 7325] close(25) = -1 EBADF (Bad file descriptor) [pid 7325] close(26) = -1 EBADF (Bad file descriptor) [pid 7325] close(27) = -1 EBADF (Bad file descriptor) [pid 7325] close(28) = -1 EBADF (Bad file descriptor) [pid 7325] close(29) = -1 EBADF (Bad file descriptor) [pid 7325] exit_group(0 [pid 7344] <... futex resumed>) = ? [pid 7326] <... futex resumed>) = ? [pid 7325] <... exit_group resumed>) = ? [pid 7344] +++ exited with 0 +++ [pid 7326] +++ exited with 0 +++ [pid 7325] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./112/binderfs") = 0 [pid 5073] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./112/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./112") = 0 [pid 5073] mkdir("./113", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570a9690) = 342 ./strace-static-x86_64: Process 7345 attached [pid 7345] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7345] chdir("./113") = 0 [pid 7345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7345] setpgid(0, 0) = 0 [pid 7345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7345] write(3, "1000", 4) = 4 [pid 7345] close(3) = 0 [pid 7345] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7345] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7345] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7346 attached [pid 7346] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7345] <... clone3 resumed> => {parent_tid=[343]}, 88) = 343 [pid 7346] <... rseq resumed>) = 0 [pid 7345] rt_sigprocmask(SIG_SETMASK, [], [pid 7346] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 7345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7346] rt_sigprocmask(SIG_SETMASK, [], [pid 7345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7345] <... futex resumed>) = 0 [pid 7346] memfd_create("syzkaller", 0 [pid 7345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7346] <... memfd_create resumed>) = 3 [pid 7346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7346] munmap(0x7f877d82c000, 138412032) = 0 [pid 7346] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7346] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7346] close(3) = 0 [pid 7346] mkdir("./file0", 0777) = 0 [ 210.098074][ T7346] loop0: detected capacity change from 0 to 32768 [ 210.114731][ T7346] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7346) [ 210.131752][ T7346] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 210.141053][ T7346] BTRFS info (device loop0): force clearing of disk cache [ 210.148212][ T7346] BTRFS info (device loop0): setting nodatasum [ 210.154557][ T7346] BTRFS info (device loop0): allowing degraded mounts [ 210.161545][ T7346] BTRFS info (device loop0): enabling disk space caching [ 210.168876][ T7346] BTRFS info (device loop0): disk space caching is enabled [ 210.190204][ T7346] BTRFS info (device loop0): enabling ssd optimizations [ 210.197238][ T7346] BTRFS info (device loop0): auto enabling async discard [ 210.205274][ T7346] BTRFS info (device loop0): rebuilding free space tree [ 210.218001][ T7346] BTRFS info (device loop0): disabling free space tree [ 210.224928][ T7346] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.234749][ T7346] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7346] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7346] chdir("./file0") = 0 [pid 7346] ioctl(4, LOOP_CLR_FD) = 0 [pid 7346] close(4) = 0 [pid 7346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 210.247648][ T7346] BTRFS info (device loop0): checking UUID tree [pid 7346] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7345] <... futex resumed>) = 0 [pid 7345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7346] <... futex resumed>) = 0 [pid 7346] open("./file0", O_RDONLY) = 4 [pid 7346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7345] <... futex resumed>) = 0 [pid 7346] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7346] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7346] <... ioctl resumed>) = 0 [pid 7346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7345] <... futex resumed>) = 0 [pid 7346] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7345] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 210.355898][ T7346] BTRFS info (device loop0): balance: start -d -m [ 210.366956][ T7346] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7345] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7345] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7345] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[344]}, 88) = 344 [pid 7345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7345] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7345] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7364 attached [pid 7364] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7364] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7364] open("./file0", O_RDONLY) = 5 [pid 7364] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7345] <... futex resumed>) = 0 [pid 7364] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7345] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7345] <... futex resumed>) = 0 [pid 7364] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 210.396941][ T7346] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7345] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7364] <... ioctl resumed>) = 0 [pid 7364] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 210.512416][ T7346] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 210.539417][ T7346] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7364] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7346] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7346] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7346] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7345] close(3) = 0 [pid 7345] close(4) = 0 [pid 7345] close(5) = 0 [pid 7345] close(6) = -1 EBADF (Bad file descriptor) [pid 7345] close(7) = -1 EBADF (Bad file descriptor) [pid 7345] close(8) = -1 EBADF (Bad file descriptor) [pid 7345] close(9) = -1 EBADF (Bad file descriptor) [pid 7345] close(10) = -1 EBADF (Bad file descriptor) [pid 7345] close(11) = -1 EBADF (Bad file descriptor) [pid 7345] close(12) = -1 EBADF (Bad file descriptor) [pid 7345] close(13) = -1 EBADF (Bad file descriptor) [pid 7345] close(14) = -1 EBADF (Bad file descriptor) [ 210.559634][ T7346] BTRFS info (device loop0): balance: ended with status: 0 [pid 7345] close(15) = -1 EBADF (Bad file descriptor) [pid 7345] close(16) = -1 EBADF (Bad file descriptor) [pid 7345] close(17) = -1 EBADF (Bad file descriptor) [pid 7345] close(18) = -1 EBADF (Bad file descriptor) [pid 7345] close(19) = -1 EBADF (Bad file descriptor) [pid 7345] close(20) = -1 EBADF (Bad file descriptor) [pid 7345] close(21) = -1 EBADF (Bad file descriptor) [pid 7345] close(22) = -1 EBADF (Bad file descriptor) [pid 7345] close(23) = -1 EBADF (Bad file descriptor) [pid 7345] close(24) = -1 EBADF (Bad file descriptor) [pid 7345] close(25) = -1 EBADF (Bad file descriptor) [pid 7345] close(26) = -1 EBADF (Bad file descriptor) [pid 7345] close(27) = -1 EBADF (Bad file descriptor) [pid 7345] close(28) = -1 EBADF (Bad file descriptor) [pid 7345] close(29) = -1 EBADF (Bad file descriptor) [pid 7345] exit_group(0) = ? [pid 7364] <... futex resumed>) = ? [pid 7346] <... futex resumed>) = ? [pid 7364] +++ exited with 0 +++ [pid 7346] +++ exited with 0 +++ [pid 7345] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./113/binderfs") = 0 [pid 5073] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./113/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./113") = 0 [pid 5073] mkdir("./114", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7365 attached , child_tidptr=0x5555570a9690) = 345 [pid 7365] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7365] chdir("./114") = 0 [pid 7365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7365] setpgid(0, 0) = 0 [pid 7365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7365] write(3, "1000", 4) = 4 [pid 7365] close(3) = 0 [pid 7365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7365] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7365] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7366 attached [pid 7366] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7365] <... clone3 resumed> => {parent_tid=[346]}, 88) = 346 [pid 7366] set_robust_list(0x7f8785c4c9a0, 24 [pid 7365] rt_sigprocmask(SIG_SETMASK, [], [pid 7366] <... set_robust_list resumed>) = 0 [pid 7365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7366] rt_sigprocmask(SIG_SETMASK, [], [pid 7365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7366] memfd_create("syzkaller", 0 [pid 7365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7366] <... memfd_create resumed>) = 3 [pid 7366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7366] munmap(0x7f877d82c000, 138412032) = 0 [pid 7366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7366] close(3) = 0 [pid 7366] mkdir("./file0", 0777) = 0 [ 211.139958][ T7366] loop0: detected capacity change from 0 to 32768 [ 211.166301][ T7366] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7366) [ 211.183470][ T7366] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 211.192724][ T7366] BTRFS info (device loop0): force clearing of disk cache [ 211.199893][ T7366] BTRFS info (device loop0): setting nodatasum [ 211.206077][ T7366] BTRFS info (device loop0): allowing degraded mounts [ 211.212828][ T7366] BTRFS info (device loop0): enabling disk space caching [ 211.219873][ T7366] BTRFS info (device loop0): disk space caching is enabled [ 211.241900][ T7366] BTRFS info (device loop0): enabling ssd optimizations [ 211.248929][ T7366] BTRFS info (device loop0): auto enabling async discard [ 211.256999][ T7366] BTRFS info (device loop0): rebuilding free space tree [ 211.268742][ T7366] BTRFS info (device loop0): disabling free space tree [ 211.275764][ T7366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7366] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7366] chdir("./file0") = 0 [pid 7366] ioctl(4, LOOP_CLR_FD) = 0 [pid 7366] close(4) = 0 [pid 7366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7365] <... futex resumed>) = 0 [pid 7366] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] open("./file0", O_RDONLY [pid 7365] <... futex resumed>) = 0 [pid 7365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7366] <... open resumed>) = 4 [pid 7366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7366] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7365] <... futex resumed>) = 0 [pid 7365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7366] <... futex resumed>) = 0 [pid 7365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7366] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [ 211.285442][ T7366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.298903][ T7366] BTRFS info (device loop0): checking UUID tree [pid 7366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] <... futex resumed>) = 0 [pid 7365] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7366] <... futex resumed>) = 1 [pid 7366] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7365] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7365] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7365] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[347]}, 88) = 347 [pid 7365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7365] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7365] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7384 attached [pid 7384] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7384] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7384] open("./file0", O_RDONLY) = 5 [pid 7384] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7365] <... futex resumed>) = 0 [pid 7384] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7365] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7365] <... futex resumed>) = 0 [pid 7384] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 211.381707][ T7366] BTRFS info (device loop0): balance: start -d -m [ 211.393993][ T7366] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7365] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7384] <... ioctl resumed>) = 0 [pid 7384] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 211.548812][ T7366] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 211.582692][ T7366] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7384] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7366] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7366] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7365] close(3) = 0 [pid 7365] close(4) = 0 [pid 7365] close(5) = 0 [pid 7365] close(6) = -1 EBADF (Bad file descriptor) [pid 7365] close(7) = -1 EBADF (Bad file descriptor) [pid 7365] close(8) = -1 EBADF (Bad file descriptor) [pid 7365] close(9) = -1 EBADF (Bad file descriptor) [pid 7365] close(10) = -1 EBADF (Bad file descriptor) [pid 7365] close(11) = -1 EBADF (Bad file descriptor) [pid 7365] close(12) = -1 EBADF (Bad file descriptor) [pid 7365] close(13) = -1 EBADF (Bad file descriptor) [pid 7365] close(14) = -1 EBADF (Bad file descriptor) [pid 7365] close(15) = -1 EBADF (Bad file descriptor) [pid 7365] close(16) = -1 EBADF (Bad file descriptor) [ 211.606992][ T7366] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 211.626463][ T7366] BTRFS info (device loop0): balance: ended with status: 0 [pid 7365] close(17) = -1 EBADF (Bad file descriptor) [pid 7365] close(18) = -1 EBADF (Bad file descriptor) [pid 7365] close(19) = -1 EBADF (Bad file descriptor) [pid 7365] close(20) = -1 EBADF (Bad file descriptor) [pid 7365] close(21) = -1 EBADF (Bad file descriptor) [pid 7365] close(22) = -1 EBADF (Bad file descriptor) [pid 7365] close(23) = -1 EBADF (Bad file descriptor) [pid 7365] close(24) = -1 EBADF (Bad file descriptor) [pid 7365] close(25) = -1 EBADF (Bad file descriptor) [pid 7365] close(26) = -1 EBADF (Bad file descriptor) [pid 7365] close(27) = -1 EBADF (Bad file descriptor) [pid 7365] close(28) = -1 EBADF (Bad file descriptor) [pid 7365] close(29) = -1 EBADF (Bad file descriptor) [pid 7365] exit_group(0 [pid 7384] <... futex resumed>) = ? [pid 7365] <... exit_group resumed>) = ? [pid 7384] +++ exited with 0 +++ [pid 7366] <... futex resumed>) = ? [pid 7366] +++ exited with 0 +++ [pid 7365] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=345, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./114/binderfs") = 0 [pid 5073] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./114/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./114") = 0 [pid 5073] mkdir("./115", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7385 attached , child_tidptr=0x5555570a9690) = 348 [pid 7385] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7385] chdir("./115") = 0 [pid 7385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7385] setpgid(0, 0) = 0 [pid 7385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7385] write(3, "1000", 4) = 4 [pid 7385] close(3) = 0 [pid 7385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7385] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7385] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7386 attached [pid 7386] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7385] <... clone3 resumed> => {parent_tid=[349]}, 88) = 349 [pid 7386] set_robust_list(0x7f8785c4c9a0, 24 [pid 7385] rt_sigprocmask(SIG_SETMASK, [], [pid 7386] <... set_robust_list resumed>) = 0 [pid 7385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] memfd_create("syzkaller", 0 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7386] <... memfd_create resumed>) = 3 [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [ 212.105676][ T4464] Bluetooth: hci0: command 0x0406 tx timeout [pid 7386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7386] munmap(0x7f877d82c000, 138412032) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7386] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7386] close(3) = 0 [pid 7386] mkdir("./file0", 0777) = 0 [ 212.193021][ T7386] loop0: detected capacity change from 0 to 32768 [ 212.213240][ T7386] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7386) [ 212.230308][ T7386] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 212.239582][ T7386] BTRFS info (device loop0): force clearing of disk cache [ 212.246729][ T7386] BTRFS info (device loop0): setting nodatasum [ 212.252872][ T7386] BTRFS info (device loop0): allowing degraded mounts [ 212.259665][ T7386] BTRFS info (device loop0): enabling disk space caching [ 212.266784][ T7386] BTRFS info (device loop0): disk space caching is enabled [ 212.290108][ T7386] BTRFS info (device loop0): enabling ssd optimizations [ 212.297097][ T7386] BTRFS info (device loop0): auto enabling async discard [ 212.305711][ T7386] BTRFS info (device loop0): rebuilding free space tree [ 212.317958][ T7386] BTRFS info (device loop0): disabling free space tree [ 212.324986][ T7386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7386] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7386] chdir("./file0") = 0 [pid 7386] ioctl(4, LOOP_CLR_FD) = 0 [pid 7386] close(4) = 0 [pid 7386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7386] <... futex resumed>) = 1 [pid 7385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7386] open("./file0", O_RDONLY) = 4 [ 212.334661][ T7386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.347535][ T7386] BTRFS info (device loop0): checking UUID tree [pid 7386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7386] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7385] <... futex resumed>) = 0 [pid 7386] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7385] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7385] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7385] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[350]}, 88) = 350 [pid 7385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7385] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7404 attached [pid 7404] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7404] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7404] open("./file0", O_RDONLY) = 5 [pid 7404] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7385] <... futex resumed>) = 0 [pid 7404] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7385] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 212.418320][ T7386] BTRFS info (device loop0): balance: start -d -m [ 212.427653][ T7386] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 212.451312][ T7386] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7385] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7404] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7385] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 212.564566][ T7386] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7404] <... ioctl resumed>) = 0 [pid 7404] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7404] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7386] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7386] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7386] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7385] close(3) = 0 [pid 7385] close(4) = 0 [pid 7385] close(5) = 0 [pid 7385] close(6) = -1 EBADF (Bad file descriptor) [pid 7385] close(7) = -1 EBADF (Bad file descriptor) [pid 7385] close(8) = -1 EBADF (Bad file descriptor) [pid 7385] close(9) = -1 EBADF (Bad file descriptor) [pid 7385] close(10) = -1 EBADF (Bad file descriptor) [ 212.652445][ T7386] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 212.671728][ T7386] BTRFS info (device loop0): balance: ended with status: 0 [pid 7385] close(11) = -1 EBADF (Bad file descriptor) [pid 7385] close(12) = -1 EBADF (Bad file descriptor) [pid 7385] close(13) = -1 EBADF (Bad file descriptor) [pid 7385] close(14) = -1 EBADF (Bad file descriptor) [pid 7385] close(15) = -1 EBADF (Bad file descriptor) [pid 7385] close(16) = -1 EBADF (Bad file descriptor) [pid 7385] close(17) = -1 EBADF (Bad file descriptor) [pid 7385] close(18) = -1 EBADF (Bad file descriptor) [pid 7385] close(19) = -1 EBADF (Bad file descriptor) [pid 7385] close(20) = -1 EBADF (Bad file descriptor) [pid 7385] close(21) = -1 EBADF (Bad file descriptor) [pid 7385] close(22) = -1 EBADF (Bad file descriptor) [pid 7385] close(23) = -1 EBADF (Bad file descriptor) [pid 7385] close(24) = -1 EBADF (Bad file descriptor) [pid 7385] close(25) = -1 EBADF (Bad file descriptor) [pid 7385] close(26) = -1 EBADF (Bad file descriptor) [pid 7385] close(27) = -1 EBADF (Bad file descriptor) [pid 7385] close(28) = -1 EBADF (Bad file descriptor) [pid 7385] close(29) = -1 EBADF (Bad file descriptor) [pid 7385] exit_group(0) = ? [pid 7404] <... futex resumed>) = ? [pid 7386] <... futex resumed>) = ? [pid 7404] +++ exited with 0 +++ [pid 7386] +++ exited with 0 +++ [pid 7385] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./115/binderfs") = 0 [pid 5073] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./115/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./115") = 0 [pid 5073] mkdir("./116", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7405 attached [pid 7405] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 351 [pid 7405] <... set_robust_list resumed>) = 0 [pid 7405] chdir("./116") = 0 [pid 7405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7405] setpgid(0, 0) = 0 [pid 7405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7405] write(3, "1000", 4) = 4 [pid 7405] close(3) = 0 [pid 7405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7405] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7405] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7406 attached [pid 7406] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7405] <... clone3 resumed> => {parent_tid=[352]}, 88) = 352 [pid 7406] <... rseq resumed>) = 0 [pid 7405] rt_sigprocmask(SIG_SETMASK, [], [pid 7406] set_robust_list(0x7f8785c4c9a0, 24 [pid 7405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7406] <... set_robust_list resumed>) = 0 [pid 7405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] rt_sigprocmask(SIG_SETMASK, [], [pid 7405] <... futex resumed>) = 0 [pid 7406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7406] memfd_create("syzkaller", 0) = 3 [pid 7406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7406] munmap(0x7f877d82c000, 138412032) = 0 [pid 7406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7406] close(3) = 0 [pid 7406] mkdir("./file0", 0777) = 0 [ 213.321882][ T7406] loop0: detected capacity change from 0 to 32768 [ 213.336554][ T7406] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7406) [ 213.352764][ T7406] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.362190][ T7406] BTRFS info (device loop0): force clearing of disk cache [ 213.369364][ T7406] BTRFS info (device loop0): setting nodatasum [ 213.375574][ T7406] BTRFS info (device loop0): allowing degraded mounts [ 213.382351][ T7406] BTRFS info (device loop0): enabling disk space caching [ 213.389426][ T7406] BTRFS info (device loop0): disk space caching is enabled [ 213.411472][ T7406] BTRFS info (device loop0): enabling ssd optimizations [ 213.418460][ T7406] BTRFS info (device loop0): auto enabling async discard [ 213.427020][ T7406] BTRFS info (device loop0): rebuilding free space tree [ 213.438910][ T7406] BTRFS info (device loop0): disabling free space tree [ 213.445899][ T7406] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.455568][ T7406] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7406] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7406] chdir("./file0") = 0 [pid 7406] ioctl(4, LOOP_CLR_FD) = 0 [pid 7406] close(4) = 0 [pid 7406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] <... futex resumed>) = 0 [pid 7406] <... futex resumed>) = 1 [pid 7405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] open("./file0", O_RDONLY [pid 7405] <... futex resumed>) = 0 [pid 7405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7406] <... open resumed>) = 4 [ 213.468847][ T7406] BTRFS info (device loop0): checking UUID tree [pid 7406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7405] <... futex resumed>) = 0 [pid 7405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7406] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7406] <... ioctl resumed>) = 0 [pid 7406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] <... futex resumed>) = 0 [pid 7406] <... futex resumed>) = 1 [pid 7405] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7405] <... futex resumed>) = 0 [pid 7405] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7405] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7405] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7424 attached [pid 7424] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7424] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7405] <... clone3 resumed> => {parent_tid=[353]}, 88) = 353 [pid 7424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7405] rt_sigprocmask(SIG_SETMASK, [], [pid 7424] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7405] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7424] <... futex resumed>) = 0 [pid 7405] <... futex resumed>) = 1 [pid 7424] open("./file0", O_RDONLY [pid 7405] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7424] <... open resumed>) = 5 [pid 7424] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7405] <... futex resumed>) = 0 [pid 7424] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7405] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7424] <... futex resumed>) = 0 [pid 7405] <... futex resumed>) = 1 [pid 7424] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 213.526754][ T7406] BTRFS info (device loop0): balance: start -d -m [ 213.535264][ T7406] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 213.563819][ T7406] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7405] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7424] <... ioctl resumed>) = 0 [pid 7424] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 213.726237][ T7406] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 213.753441][ T7406] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7424] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7406] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7406] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] close(3 [pid 7406] <... futex resumed>) = 0 [pid 7405] <... close resumed>) = 0 [pid 7406] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7405] close(4) = 0 [pid 7405] close(5) = 0 [pid 7405] close(6) = -1 EBADF (Bad file descriptor) [pid 7405] close(7) = -1 EBADF (Bad file descriptor) [pid 7405] close(8) = -1 EBADF (Bad file descriptor) [pid 7405] close(9) = -1 EBADF (Bad file descriptor) [pid 7405] close(10) = -1 EBADF (Bad file descriptor) [ 213.772604][ T7406] BTRFS info (device loop0): balance: ended with status: 0 [pid 7405] close(11) = -1 EBADF (Bad file descriptor) [pid 7405] close(12) = -1 EBADF (Bad file descriptor) [pid 7405] close(13) = -1 EBADF (Bad file descriptor) [pid 7405] close(14) = -1 EBADF (Bad file descriptor) [pid 7405] close(15) = -1 EBADF (Bad file descriptor) [pid 7405] close(16) = -1 EBADF (Bad file descriptor) [pid 7405] close(17) = -1 EBADF (Bad file descriptor) [pid 7405] close(18) = -1 EBADF (Bad file descriptor) [pid 7405] close(19) = -1 EBADF (Bad file descriptor) [pid 7405] close(20) = -1 EBADF (Bad file descriptor) [pid 7405] close(21) = -1 EBADF (Bad file descriptor) [pid 7405] close(22) = -1 EBADF (Bad file descriptor) [pid 7405] close(23) = -1 EBADF (Bad file descriptor) [pid 7405] close(24) = -1 EBADF (Bad file descriptor) [pid 7405] close(25) = -1 EBADF (Bad file descriptor) [pid 7405] close(26) = -1 EBADF (Bad file descriptor) [pid 7405] close(27) = -1 EBADF (Bad file descriptor) [pid 7405] close(28) = -1 EBADF (Bad file descriptor) [pid 7405] close(29) = -1 EBADF (Bad file descriptor) [pid 7405] exit_group(0 [pid 7424] <... futex resumed>) = ? [pid 7406] <... futex resumed>) = ? [pid 7405] <... exit_group resumed>) = ? [pid 7424] +++ exited with 0 +++ [pid 7406] +++ exited with 0 +++ [pid 7405] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./116/binderfs") = 0 [pid 5073] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./116/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./116") = 0 [pid 5073] mkdir("./117", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7425 attached [pid 7425] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 354 [pid 7425] <... set_robust_list resumed>) = 0 [pid 7425] chdir("./117") = 0 [pid 7425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7425] setpgid(0, 0) = 0 [pid 7425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7425] write(3, "1000", 4) = 4 [pid 7425] close(3) = 0 [pid 7425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7425] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7425] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7426 attached [pid 7426] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7425] <... clone3 resumed> => {parent_tid=[355]}, 88) = 355 [pid 7426] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 7425] rt_sigprocmask(SIG_SETMASK, [], [pid 7426] rt_sigprocmask(SIG_SETMASK, [], [pid 7425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7426] memfd_create("syzkaller", 0 [pid 7425] <... futex resumed>) = 0 [pid 7425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7426] <... memfd_create resumed>) = 3 [pid 7426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7426] munmap(0x7f877d82c000, 138412032) = 0 [pid 7426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7426] close(3) = 0 [pid 7426] mkdir("./file0", 0777) = 0 [ 214.396679][ T7426] loop0: detected capacity change from 0 to 32768 [ 214.421195][ T7426] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7426) [ 214.437309][ T7426] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 214.446570][ T7426] BTRFS info (device loop0): force clearing of disk cache [ 214.453663][ T7426] BTRFS info (device loop0): setting nodatasum [ 214.459844][ T7426] BTRFS info (device loop0): allowing degraded mounts [ 214.466697][ T7426] BTRFS info (device loop0): enabling disk space caching [ 214.473708][ T7426] BTRFS info (device loop0): disk space caching is enabled [ 214.495762][ T7426] BTRFS info (device loop0): enabling ssd optimizations [ 214.502721][ T7426] BTRFS info (device loop0): auto enabling async discard [ 214.510822][ T7426] BTRFS info (device loop0): rebuilding free space tree [ 214.522955][ T7426] BTRFS info (device loop0): disabling free space tree [ 214.530363][ T7426] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7426] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7426] chdir("./file0") = 0 [pid 7426] ioctl(4, LOOP_CLR_FD) = 0 [pid 7426] close(4) = 0 [pid 7426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7426] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7425] <... futex resumed>) = 0 [pid 7425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7426] <... futex resumed>) = 0 [pid 7425] <... futex resumed>) = 1 [pid 7425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7426] open("./file0", O_RDONLY) = 4 [ 214.540072][ T7426] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.554151][ T7426] BTRFS info (device loop0): checking UUID tree [pid 7426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7425] <... futex resumed>) = 0 [pid 7426] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7426] <... futex resumed>) = 0 [pid 7425] <... futex resumed>) = 1 [pid 7426] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7426] <... ioctl resumed>) = 0 [pid 7426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7425] <... futex resumed>) = 0 [pid 7425] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7425] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7426] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7425] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7425] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7425] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7444 attached => {parent_tid=[356]}, 88) = 356 [pid 7425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7425] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7425] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7444] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7444] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7444] open("./file0", O_RDONLY) = 5 [pid 7444] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7425] <... futex resumed>) = 0 [pid 7444] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7425] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 214.615940][ T7426] BTRFS info (device loop0): balance: start -d -m [ 214.624867][ T7426] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 214.650600][ T7426] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7425] <... futex resumed>) = 0 [pid 7444] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7425] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 214.701154][ T7426] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7444] <... ioctl resumed>) = 0 [pid 7444] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7444] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7426] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7426] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7426] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7425] close(3) = 0 [pid 7425] close(4) = 0 [pid 7425] close(5) = 0 [pid 7425] close(6) = -1 EBADF (Bad file descriptor) [pid 7425] close(7) = -1 EBADF (Bad file descriptor) [pid 7425] close(8) = -1 EBADF (Bad file descriptor) [pid 7425] close(9) = -1 EBADF (Bad file descriptor) [pid 7425] close(10) = -1 EBADF (Bad file descriptor) [pid 7425] close(11) = -1 EBADF (Bad file descriptor) [ 214.861570][ T7426] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 214.880628][ T7426] BTRFS info (device loop0): balance: ended with status: 0 [pid 7425] close(12) = -1 EBADF (Bad file descriptor) [pid 7425] close(13) = -1 EBADF (Bad file descriptor) [pid 7425] close(14) = -1 EBADF (Bad file descriptor) [pid 7425] close(15) = -1 EBADF (Bad file descriptor) [pid 7425] close(16) = -1 EBADF (Bad file descriptor) [pid 7425] close(17) = -1 EBADF (Bad file descriptor) [pid 7425] close(18) = -1 EBADF (Bad file descriptor) [pid 7425] close(19) = -1 EBADF (Bad file descriptor) [pid 7425] close(20) = -1 EBADF (Bad file descriptor) [pid 7425] close(21) = -1 EBADF (Bad file descriptor) [pid 7425] close(22) = -1 EBADF (Bad file descriptor) [pid 7425] close(23) = -1 EBADF (Bad file descriptor) [pid 7425] close(24) = -1 EBADF (Bad file descriptor) [pid 7425] close(25) = -1 EBADF (Bad file descriptor) [pid 7425] close(26) = -1 EBADF (Bad file descriptor) [pid 7425] close(27) = -1 EBADF (Bad file descriptor) [pid 7425] close(28) = -1 EBADF (Bad file descriptor) [pid 7425] close(29) = -1 EBADF (Bad file descriptor) [pid 7425] exit_group(0 [pid 7444] <... futex resumed>) = ? [pid 7426] <... futex resumed>) = ? [pid 7425] <... exit_group resumed>) = ? [pid 7426] +++ exited with 0 +++ [pid 7444] +++ exited with 0 +++ [pid 7425] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=354, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./117/binderfs") = 0 [pid 5073] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./117/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./117") = 0 [pid 5073] mkdir("./118", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7445 attached , child_tidptr=0x5555570a9690) = 357 [pid 7445] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7445] chdir("./118") = 0 [pid 7445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7445] setpgid(0, 0) = 0 [pid 7445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7445] write(3, "1000", 4) = 4 [pid 7445] close(3) = 0 [pid 7445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7445] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7445] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7446 attached [pid 7446] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7446] set_robust_list(0x7f8785c4c9a0, 24 [pid 7445] <... clone3 resumed> => {parent_tid=[358]}, 88) = 358 [pid 7446] <... set_robust_list resumed>) = 0 [pid 7445] rt_sigprocmask(SIG_SETMASK, [], [pid 7446] rt_sigprocmask(SIG_SETMASK, [], [pid 7445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7446] <... futex resumed>) = 0 [pid 7445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7446] memfd_create("syzkaller", 0) = 3 [pid 7446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7446] munmap(0x7f877d82c000, 138412032) = 0 [pid 7446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7446] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7446] close(3) = 0 [pid 7446] mkdir("./file0", 0777) = 0 [ 215.651917][ T7446] loop0: detected capacity change from 0 to 32768 [ 215.676981][ T7446] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7446) [ 215.694493][ T7446] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 215.703730][ T7446] BTRFS info (device loop0): force clearing of disk cache [ 215.710929][ T7446] BTRFS info (device loop0): setting nodatasum [ 215.717123][ T7446] BTRFS info (device loop0): allowing degraded mounts [ 215.723980][ T7446] BTRFS info (device loop0): enabling disk space caching [ 215.731009][ T7446] BTRFS info (device loop0): disk space caching is enabled [ 215.752929][ T7446] BTRFS info (device loop0): enabling ssd optimizations [ 215.760222][ T7446] BTRFS info (device loop0): auto enabling async discard [ 215.768548][ T7446] BTRFS info (device loop0): rebuilding free space tree [ 215.780378][ T7446] BTRFS info (device loop0): disabling free space tree [ 215.787321][ T7446] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7446] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7446] chdir("./file0") = 0 [pid 7446] ioctl(4, LOOP_CLR_FD) = 0 [ 215.797003][ T7446] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 215.811020][ T7446] BTRFS info (device loop0): checking UUID tree [pid 7446] close(4) = 0 [pid 7446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] open("./file0", O_RDONLY [pid 7445] <... futex resumed>) = 0 [pid 7446] <... open resumed>) = 4 [pid 7445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] <... futex resumed>) = 0 [pid 7445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] <... futex resumed>) = 0 [pid 7445] <... futex resumed>) = 1 [pid 7446] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7446] <... ioctl resumed>) = 0 [pid 7446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7445] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 215.923075][ T7446] BTRFS info (device loop0): balance: start -d -m [ 215.932179][ T7446] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7446] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7445] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7445] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[359]}, 88) = 359 [pid 7445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7445] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7464 attached [pid 7464] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7464] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7464] open("./file0", O_RDONLY) = 5 [pid 7464] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7464] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7445] <... futex resumed>) = 0 [pid 7464] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 215.963846][ T7446] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7445] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7464] <... ioctl resumed>) = 0 [pid 7464] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 216.111278][ T7446] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 216.135550][ T7446] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 216.154481][ T7446] BTRFS info (device loop0): balance: ended with status: 0 [pid 7464] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7446] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7446] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] close(3 [pid 7446] <... futex resumed>) = 0 [pid 7445] <... close resumed>) = 0 [pid 7446] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] close(4) = 0 [pid 7445] close(5) = 0 [pid 7445] close(6) = -1 EBADF (Bad file descriptor) [pid 7445] close(7) = -1 EBADF (Bad file descriptor) [pid 7445] close(8) = -1 EBADF (Bad file descriptor) [pid 7445] close(9) = -1 EBADF (Bad file descriptor) [pid 7445] close(10) = -1 EBADF (Bad file descriptor) [pid 7445] close(11) = -1 EBADF (Bad file descriptor) [pid 7445] close(12) = -1 EBADF (Bad file descriptor) [pid 7445] close(13) = -1 EBADF (Bad file descriptor) [pid 7445] close(14) = -1 EBADF (Bad file descriptor) [pid 7445] close(15) = -1 EBADF (Bad file descriptor) [pid 7445] close(16) = -1 EBADF (Bad file descriptor) [pid 7445] close(17) = -1 EBADF (Bad file descriptor) [pid 7445] close(18) = -1 EBADF (Bad file descriptor) [pid 7445] close(19) = -1 EBADF (Bad file descriptor) [pid 7445] close(20) = -1 EBADF (Bad file descriptor) [pid 7445] close(21) = -1 EBADF (Bad file descriptor) [pid 7445] close(22) = -1 EBADF (Bad file descriptor) [pid 7445] close(23) = -1 EBADF (Bad file descriptor) [pid 7445] close(24) = -1 EBADF (Bad file descriptor) [pid 7445] close(25) = -1 EBADF (Bad file descriptor) [pid 7445] close(26) = -1 EBADF (Bad file descriptor) [pid 7445] close(27) = -1 EBADF (Bad file descriptor) [pid 7445] close(28) = -1 EBADF (Bad file descriptor) [pid 7445] close(29) = -1 EBADF (Bad file descriptor) [pid 7445] exit_group(0 [pid 7464] <... futex resumed>) = ? [pid 7446] <... futex resumed>) = ? [pid 7445] <... exit_group resumed>) = ? [pid 7464] +++ exited with 0 +++ [pid 7446] +++ exited with 0 +++ [pid 7445] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=357, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./118/binderfs") = 0 [pid 5073] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./118/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./118") = 0 [pid 5073] mkdir("./119", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7465 attached , child_tidptr=0x5555570a9690) = 360 [pid 7465] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7465] chdir("./119") = 0 [pid 7465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7465] setpgid(0, 0) = 0 [pid 7465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7465] write(3, "1000", 4) = 4 [pid 7465] close(3) = 0 [pid 7465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7465] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7465] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7466 attached [pid 7466] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7465] <... clone3 resumed> => {parent_tid=[361]}, 88) = 361 [pid 7466] <... rseq resumed>) = 0 [pid 7465] rt_sigprocmask(SIG_SETMASK, [], [pid 7466] set_robust_list(0x7f8785c4c9a0, 24 [pid 7465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7466] <... set_robust_list resumed>) = 0 [pid 7465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] rt_sigprocmask(SIG_SETMASK, [], [pid 7465] <... futex resumed>) = 0 [pid 7466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7466] memfd_create("syzkaller", 0 [pid 7465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7466] <... memfd_create resumed>) = 3 [pid 7466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7466] munmap(0x7f877d82c000, 138412032) = 0 [pid 7466] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7466] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7466] close(3) = 0 [pid 7466] mkdir("./file0", 0777) = 0 [ 216.858980][ T7466] loop0: detected capacity change from 0 to 32768 [ 216.872459][ T7466] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7466) [ 216.888887][ T7466] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.898182][ T7466] BTRFS info (device loop0): force clearing of disk cache [ 216.905386][ T7466] BTRFS info (device loop0): setting nodatasum [ 216.911532][ T7466] BTRFS info (device loop0): allowing degraded mounts [ 216.918369][ T7466] BTRFS info (device loop0): enabling disk space caching [ 216.925425][ T7466] BTRFS info (device loop0): disk space caching is enabled [ 216.947283][ T7466] BTRFS info (device loop0): enabling ssd optimizations [ 216.954315][ T7466] BTRFS info (device loop0): auto enabling async discard [ 216.962176][ T7466] BTRFS info (device loop0): rebuilding free space tree [ 216.975479][ T7466] BTRFS info (device loop0): disabling free space tree [ 216.982366][ T7466] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.992283][ T7466] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7466] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7466] chdir("./file0") = 0 [pid 7466] ioctl(4, LOOP_CLR_FD) = 0 [pid 7466] close(4) = 0 [pid 7466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7466] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] <... futex resumed>) = 0 [pid 7465] <... futex resumed>) = 1 [pid 7466] open("./file0", O_RDONLY [pid 7465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] <... open resumed>) = 4 [ 217.006480][ T7466] BTRFS info (device loop0): checking UUID tree [pid 7466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7466] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7465] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7465] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7465] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7484 attached [pid 7484] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7465] <... clone3 resumed> => {parent_tid=[362]}, 88) = 362 [pid 7484] <... rseq resumed>) = 0 [pid 7465] rt_sigprocmask(SIG_SETMASK, [], [pid 7484] set_robust_list(0x7f8785c2b9a0, 24 [pid 7465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7484] <... set_robust_list resumed>) = 0 [pid 7465] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] rt_sigprocmask(SIG_SETMASK, [], [pid 7465] <... futex resumed>) = 0 [pid 7484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7465] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7484] open("./file0", O_RDONLY) = 5 [pid 7484] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7465] <... futex resumed>) = 0 [ 217.072200][ T7466] BTRFS info (device loop0): balance: start -d -m [ 217.082529][ T7466] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 217.111848][ T7466] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7465] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7484] <... ioctl resumed>) = 0 [pid 7484] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 217.267370][ T7466] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 217.291280][ T7466] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 217.310374][ T7466] BTRFS info (device loop0): balance: ended with status: 0 [pid 7484] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7466] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7466] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] close(3 [pid 7466] <... futex resumed>) = 0 [pid 7465] <... close resumed>) = 0 [pid 7466] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] close(4) = 0 [pid 7465] close(5) = 0 [pid 7465] close(6) = -1 EBADF (Bad file descriptor) [pid 7465] close(7) = -1 EBADF (Bad file descriptor) [pid 7465] close(8) = -1 EBADF (Bad file descriptor) [pid 7465] close(9) = -1 EBADF (Bad file descriptor) [pid 7465] close(10) = -1 EBADF (Bad file descriptor) [pid 7465] close(11) = -1 EBADF (Bad file descriptor) [pid 7465] close(12) = -1 EBADF (Bad file descriptor) [pid 7465] close(13) = -1 EBADF (Bad file descriptor) [pid 7465] close(14) = -1 EBADF (Bad file descriptor) [pid 7465] close(15) = -1 EBADF (Bad file descriptor) [pid 7465] close(16) = -1 EBADF (Bad file descriptor) [pid 7465] close(17) = -1 EBADF (Bad file descriptor) [pid 7465] close(18) = -1 EBADF (Bad file descriptor) [pid 7465] close(19) = -1 EBADF (Bad file descriptor) [pid 7465] close(20) = -1 EBADF (Bad file descriptor) [pid 7465] close(21) = -1 EBADF (Bad file descriptor) [pid 7465] close(22) = -1 EBADF (Bad file descriptor) [pid 7465] close(23) = -1 EBADF (Bad file descriptor) [pid 7465] close(24) = -1 EBADF (Bad file descriptor) [pid 7465] close(25) = -1 EBADF (Bad file descriptor) [pid 7465] close(26) = -1 EBADF (Bad file descriptor) [pid 7465] close(27) = -1 EBADF (Bad file descriptor) [pid 7465] close(28) = -1 EBADF (Bad file descriptor) [pid 7465] close(29) = -1 EBADF (Bad file descriptor) [pid 7465] exit_group(0 [pid 7484] <... futex resumed>) = ? [pid 7466] <... futex resumed>) = ? [pid 7465] <... exit_group resumed>) = ? [pid 7484] +++ exited with 0 +++ [pid 7466] +++ exited with 0 +++ [pid 7465] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=360, si_uid=0, si_status=0, si_utime=0, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./119/binderfs") = 0 [pid 5073] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./119/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./119") = 0 [pid 5073] mkdir("./120", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7485 attached [pid 7485] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 363 [pid 7485] <... set_robust_list resumed>) = 0 [pid 7485] chdir("./120") = 0 [pid 7485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7485] setpgid(0, 0) = 0 [pid 7485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7485] write(3, "1000", 4) = 4 [pid 7485] close(3) = 0 [pid 7485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7485] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7485] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7486 attached [pid 7486] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7485] <... clone3 resumed> => {parent_tid=[364]}, 88) = 364 [pid 7486] set_robust_list(0x7f8785c4c9a0, 24 [pid 7485] rt_sigprocmask(SIG_SETMASK, [], [pid 7486] <... set_robust_list resumed>) = 0 [pid 7485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] memfd_create("syzkaller", 0 [pid 7485] <... futex resumed>) = 0 [pid 7485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7486] <... memfd_create resumed>) = 3 [pid 7486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7486] munmap(0x7f877d82c000, 138412032) = 0 [pid 7486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7486] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7486] close(3) = 0 [pid 7486] mkdir("./file0", 0777) = 0 [ 217.910100][ T7486] loop0: detected capacity change from 0 to 32768 [ 217.934350][ T7486] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7486) [ 217.949987][ T7486] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 217.959281][ T7486] BTRFS info (device loop0): force clearing of disk cache [ 217.966427][ T7486] BTRFS info (device loop0): setting nodatasum [ 217.972573][ T7486] BTRFS info (device loop0): allowing degraded mounts [ 217.979397][ T7486] BTRFS info (device loop0): enabling disk space caching [ 217.986466][ T7486] BTRFS info (device loop0): disk space caching is enabled [ 218.008082][ T7486] BTRFS info (device loop0): enabling ssd optimizations [ 218.015259][ T7486] BTRFS info (device loop0): auto enabling async discard [ 218.023159][ T7486] BTRFS info (device loop0): rebuilding free space tree [ 218.035978][ T7486] BTRFS info (device loop0): disabling free space tree [ 218.042886][ T7486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7486] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7486] chdir("./file0") = 0 [pid 7486] ioctl(4, LOOP_CLR_FD) = 0 [pid 7486] close(4) = 0 [pid 7486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7486] open("./file0", O_RDONLY) = 4 [ 218.052821][ T7486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.066345][ T7486] BTRFS info (device loop0): checking UUID tree [pid 7486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7486] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7485] <... futex resumed>) = 0 [pid 7486] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7485] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7485] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7485] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7504 attached => {parent_tid=[365]}, 88) = 365 [pid 7485] rt_sigprocmask(SIG_SETMASK, [], [pid 7504] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7504] set_robust_list(0x7f8785c2b9a0, 24 [pid 7485] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7504] <... set_robust_list resumed>) = 0 [pid 7485] <... futex resumed>) = 0 [pid 7504] rt_sigprocmask(SIG_SETMASK, [], [pid 7485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7504] open("./file0", O_RDONLY) = 5 [pid 7504] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7504] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] <... futex resumed>) = 0 [pid 7504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7485] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7504] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7485] <... futex resumed>) = 0 [ 218.132618][ T7486] BTRFS info (device loop0): balance: start -d -m [ 218.143558][ T7486] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 218.170548][ T7486] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7485] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7504] <... ioctl resumed>) = 0 [pid 7504] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 218.341443][ T7486] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 218.365962][ T7486] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7504] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7486] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7485] close(3 [pid 7486] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7485] <... close resumed>) = 0 [pid 7485] close(4) = 0 [pid 7485] close(5) = 0 [pid 7485] close(6) = -1 EBADF (Bad file descriptor) [pid 7485] close(7) = -1 EBADF (Bad file descriptor) [pid 7485] close(8) = -1 EBADF (Bad file descriptor) [pid 7485] close(9) = -1 EBADF (Bad file descriptor) [pid 7485] close(10) = -1 EBADF (Bad file descriptor) [pid 7485] close(11) = -1 EBADF (Bad file descriptor) [pid 7485] close(12) = -1 EBADF (Bad file descriptor) [pid 7485] close(13) = -1 EBADF (Bad file descriptor) [ 218.385296][ T7486] BTRFS info (device loop0): balance: ended with status: 0 [pid 7485] close(14) = -1 EBADF (Bad file descriptor) [pid 7485] close(15) = -1 EBADF (Bad file descriptor) [pid 7485] close(16) = -1 EBADF (Bad file descriptor) [pid 7485] close(17) = -1 EBADF (Bad file descriptor) [pid 7485] close(18) = -1 EBADF (Bad file descriptor) [pid 7485] close(19) = -1 EBADF (Bad file descriptor) [pid 7485] close(20) = -1 EBADF (Bad file descriptor) [pid 7485] close(21) = -1 EBADF (Bad file descriptor) [pid 7485] close(22) = -1 EBADF (Bad file descriptor) [pid 7485] close(23) = -1 EBADF (Bad file descriptor) [pid 7485] close(24) = -1 EBADF (Bad file descriptor) [pid 7485] close(25) = -1 EBADF (Bad file descriptor) [pid 7485] close(26) = -1 EBADF (Bad file descriptor) [pid 7485] close(27) = -1 EBADF (Bad file descriptor) [pid 7485] close(28) = -1 EBADF (Bad file descriptor) [pid 7485] close(29) = -1 EBADF (Bad file descriptor) [pid 7485] exit_group(0 [pid 7504] <... futex resumed>) = ? [pid 7485] <... exit_group resumed>) = ? [pid 7504] +++ exited with 0 +++ [pid 7486] <... futex resumed>) = ? [pid 7486] +++ exited with 0 +++ [pid 7485] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=363, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./120/binderfs") = 0 [pid 5073] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./120/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./120") = 0 [pid 5073] mkdir("./121", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7505 attached , child_tidptr=0x5555570a9690) = 366 [pid 7505] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7505] chdir("./121") = 0 [pid 7505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7505] setpgid(0, 0) = 0 [pid 7505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7505] write(3, "1000", 4) = 4 [pid 7505] close(3) = 0 [pid 7505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7505] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7505] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7506 attached [pid 7506] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7506] set_robust_list(0x7f8785c4c9a0, 24 [pid 7505] <... clone3 resumed> => {parent_tid=[367]}, 88) = 367 [pid 7506] <... set_robust_list resumed>) = 0 [pid 7505] rt_sigprocmask(SIG_SETMASK, [], [pid 7506] rt_sigprocmask(SIG_SETMASK, [], [pid 7505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7506] memfd_create("syzkaller", 0 [pid 7505] <... futex resumed>) = 0 [pid 7505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7506] <... memfd_create resumed>) = 3 [pid 7506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7506] munmap(0x7f877d82c000, 138412032) = 0 [pid 7506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7506] close(3) = 0 [pid 7506] mkdir("./file0", 0777) = 0 [ 219.025177][ T7506] loop0: detected capacity change from 0 to 32768 [ 219.040028][ T7506] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7506) [ 219.055868][ T7506] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 219.065245][ T7506] BTRFS info (device loop0): force clearing of disk cache [ 219.072349][ T7506] BTRFS info (device loop0): setting nodatasum [ 219.078564][ T7506] BTRFS info (device loop0): allowing degraded mounts [ 219.085753][ T7506] BTRFS info (device loop0): enabling disk space caching [ 219.092789][ T7506] BTRFS info (device loop0): disk space caching is enabled [ 219.114716][ T7506] BTRFS info (device loop0): enabling ssd optimizations [ 219.121673][ T7506] BTRFS info (device loop0): auto enabling async discard [ 219.129823][ T7506] BTRFS info (device loop0): rebuilding free space tree [ 219.141606][ T7506] BTRFS info (device loop0): disabling free space tree [ 219.148807][ T7506] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.158475][ T7506] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7506] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7506] chdir("./file0") = 0 [pid 7506] ioctl(4, LOOP_CLR_FD) = 0 [pid 7506] close(4) = 0 [pid 7506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] <... futex resumed>) = 0 [ 219.171716][ T7506] BTRFS info (device loop0): checking UUID tree [pid 7505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7506] <... futex resumed>) = 0 [pid 7505] <... futex resumed>) = 1 [pid 7506] open("./file0", O_RDONLY [pid 7505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7506] <... open resumed>) = 4 [pid 7506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7505] <... futex resumed>) = 0 [pid 7505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7506] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7505] <... futex resumed>) = 0 [pid 7506] <... ioctl resumed>) = 0 [pid 7505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7506] <... futex resumed>) = 0 [pid 7505] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7506] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7505] <... futex resumed>) = 0 [pid 7505] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7505] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7505] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[368]}, 88) = 368 [pid 7505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7505] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7524 attached [pid 7505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7524] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7524] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7524] open("./file0", O_RDONLY) = 5 [pid 7524] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7505] <... futex resumed>) = 0 [pid 7524] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7524] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7505] <... futex resumed>) = 0 [ 219.251981][ T7506] BTRFS info (device loop0): balance: start -d -m [ 219.261924][ T7506] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 219.290864][ T7506] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7505] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7524] <... ioctl resumed>) = 0 [pid 7524] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 219.442484][ T7506] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 219.467808][ T7506] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7524] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7506] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7506] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7506] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] close(3) = 0 [pid 7505] close(4) = 0 [pid 7505] close(5) = 0 [pid 7505] close(6) = -1 EBADF (Bad file descriptor) [pid 7505] close(7) = -1 EBADF (Bad file descriptor) [ 219.486921][ T7506] BTRFS info (device loop0): balance: ended with status: 0 [pid 7505] close(8) = -1 EBADF (Bad file descriptor) [pid 7505] close(9) = -1 EBADF (Bad file descriptor) [pid 7505] close(10) = -1 EBADF (Bad file descriptor) [pid 7505] close(11) = -1 EBADF (Bad file descriptor) [pid 7505] close(12) = -1 EBADF (Bad file descriptor) [pid 7505] close(13) = -1 EBADF (Bad file descriptor) [pid 7505] close(14) = -1 EBADF (Bad file descriptor) [pid 7505] close(15) = -1 EBADF (Bad file descriptor) [pid 7505] close(16) = -1 EBADF (Bad file descriptor) [pid 7505] close(17) = -1 EBADF (Bad file descriptor) [pid 7505] close(18) = -1 EBADF (Bad file descriptor) [pid 7505] close(19) = -1 EBADF (Bad file descriptor) [pid 7505] close(20) = -1 EBADF (Bad file descriptor) [pid 7505] close(21) = -1 EBADF (Bad file descriptor) [pid 7505] close(22) = -1 EBADF (Bad file descriptor) [pid 7505] close(23) = -1 EBADF (Bad file descriptor) [pid 7505] close(24) = -1 EBADF (Bad file descriptor) [pid 7505] close(25) = -1 EBADF (Bad file descriptor) [pid 7505] close(26) = -1 EBADF (Bad file descriptor) [pid 7505] close(27) = -1 EBADF (Bad file descriptor) [pid 7505] close(28) = -1 EBADF (Bad file descriptor) [pid 7505] close(29) = -1 EBADF (Bad file descriptor) [pid 7505] exit_group(0 [pid 7524] <... futex resumed>) = ? [pid 7524] +++ exited with 0 +++ [pid 7506] <... futex resumed>) = ? [pid 7505] <... exit_group resumed>) = ? [pid 7506] +++ exited with 0 +++ [pid 7505] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=366, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./121/binderfs") = 0 [pid 5073] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./121/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./121") = 0 [pid 5073] mkdir("./122", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7525 attached , child_tidptr=0x5555570a9690) = 369 [pid 7525] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7525] chdir("./122") = 0 [pid 7525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7525] setpgid(0, 0) = 0 [pid 7525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7525] write(3, "1000", 4) = 4 [pid 7525] close(3) = 0 [pid 7525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7525] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7525] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7526 attached [pid 7526] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7526] set_robust_list(0x7f8785c4c9a0, 24 [pid 7525] <... clone3 resumed> => {parent_tid=[370]}, 88) = 370 [pid 7526] <... set_robust_list resumed>) = 0 [pid 7525] rt_sigprocmask(SIG_SETMASK, [], [pid 7526] rt_sigprocmask(SIG_SETMASK, [], [pid 7525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7526] memfd_create("syzkaller", 0 [pid 7525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7526] <... memfd_create resumed>) = 3 [pid 7526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7526] munmap(0x7f877d82c000, 138412032) = 0 [pid 7526] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7526] close(3) = 0 [pid 7526] mkdir("./file0", 0777) = 0 [ 220.093189][ T7526] loop0: detected capacity change from 0 to 32768 [ 220.108159][ T7526] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7526) [ 220.125031][ T7526] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 220.134312][ T7526] BTRFS info (device loop0): force clearing of disk cache [ 220.141418][ T7526] BTRFS info (device loop0): setting nodatasum [ 220.147628][ T7526] BTRFS info (device loop0): allowing degraded mounts [ 220.154440][ T7526] BTRFS info (device loop0): enabling disk space caching [ 220.161457][ T7526] BTRFS info (device loop0): disk space caching is enabled [ 220.183260][ T7526] BTRFS info (device loop0): enabling ssd optimizations [ 220.190392][ T7526] BTRFS info (device loop0): auto enabling async discard [ 220.198787][ T7526] BTRFS info (device loop0): rebuilding free space tree [ 220.211288][ T7526] BTRFS info (device loop0): disabling free space tree [ 220.218388][ T7526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.228181][ T7526] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7526] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7526] chdir("./file0") = 0 [pid 7526] ioctl(4, LOOP_CLR_FD) = 0 [pid 7526] close(4) = 0 [pid 7526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7525] <... futex resumed>) = 0 [pid 7525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7525] <... futex resumed>) = 0 [ 220.241468][ T7526] BTRFS info (device loop0): checking UUID tree [pid 7526] open("./file0", O_RDONLY [pid 7525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7526] <... open resumed>) = 4 [pid 7526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7525] <... futex resumed>) = 0 [pid 7526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7526] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7525] <... futex resumed>) = 0 [pid 7526] <... ioctl resumed>) = 0 [pid 7526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7526] <... futex resumed>) = 0 [pid 7525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7525] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7526] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7525] <... futex resumed>) = 0 [pid 7525] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7525] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7525] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[371]}, 88) = 371 [pid 7525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7525] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7544 attached [pid 7544] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7544] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7544] open("./file0", O_RDONLY) = 5 [pid 7544] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7544] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7525] <... futex resumed>) = 0 [pid 7525] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7525] <... futex resumed>) = 0 [pid 7525] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 220.300699][ T7526] BTRFS info (device loop0): balance: start -d -m [ 220.309044][ T7526] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 220.333619][ T7526] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7544] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7544] <... ioctl resumed>) = 0 [pid 7544] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 220.491259][ T7526] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 220.519020][ T7526] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7544] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7526] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7526] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7525] close(3 [pid 7526] <... futex resumed>) = 0 [pid 7525] <... close resumed>) = 0 [pid 7525] close(4) = 0 [pid 7525] close(5 [pid 7526] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7525] <... close resumed>) = 0 [pid 7525] close(6) = -1 EBADF (Bad file descriptor) [pid 7525] close(7) = -1 EBADF (Bad file descriptor) [pid 7525] close(8) = -1 EBADF (Bad file descriptor) [pid 7525] close(9) = -1 EBADF (Bad file descriptor) [pid 7525] close(10) = -1 EBADF (Bad file descriptor) [ 220.538513][ T7526] BTRFS info (device loop0): balance: ended with status: 0 [pid 7525] close(11) = -1 EBADF (Bad file descriptor) [pid 7525] close(12) = -1 EBADF (Bad file descriptor) [pid 7525] close(13) = -1 EBADF (Bad file descriptor) [pid 7525] close(14) = -1 EBADF (Bad file descriptor) [pid 7525] close(15) = -1 EBADF (Bad file descriptor) [pid 7525] close(16) = -1 EBADF (Bad file descriptor) [pid 7525] close(17) = -1 EBADF (Bad file descriptor) [pid 7525] close(18) = -1 EBADF (Bad file descriptor) [pid 7525] close(19) = -1 EBADF (Bad file descriptor) [pid 7525] close(20) = -1 EBADF (Bad file descriptor) [pid 7525] close(21) = -1 EBADF (Bad file descriptor) [pid 7525] close(22) = -1 EBADF (Bad file descriptor) [pid 7525] close(23) = -1 EBADF (Bad file descriptor) [pid 7525] close(24) = -1 EBADF (Bad file descriptor) [pid 7525] close(25) = -1 EBADF (Bad file descriptor) [pid 7525] close(26) = -1 EBADF (Bad file descriptor) [pid 7525] close(27) = -1 EBADF (Bad file descriptor) [pid 7525] close(28) = -1 EBADF (Bad file descriptor) [pid 7525] close(29) = -1 EBADF (Bad file descriptor) [pid 7525] exit_group(0 [pid 7544] <... futex resumed>) = ? [pid 7526] <... futex resumed>) = ? [pid 7525] <... exit_group resumed>) = ? [pid 7544] +++ exited with 0 +++ [pid 7526] +++ exited with 0 +++ [pid 7525] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./122/binderfs") = 0 [pid 5073] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./122/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./122") = 0 [pid 5073] mkdir("./123", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7545 attached , child_tidptr=0x5555570a9690) = 372 [pid 7545] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7545] chdir("./123") = 0 [pid 7545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7545] setpgid(0, 0) = 0 [pid 7545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7545] write(3, "1000", 4) = 4 [pid 7545] close(3) = 0 [pid 7545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7545] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7545] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7546 attached [pid 7546] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7546] set_robust_list(0x7f8785c4c9a0, 24 [pid 7545] <... clone3 resumed> => {parent_tid=[373]}, 88) = 373 [pid 7546] <... set_robust_list resumed>) = 0 [pid 7545] rt_sigprocmask(SIG_SETMASK, [], [pid 7546] rt_sigprocmask(SIG_SETMASK, [], [pid 7545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] memfd_create("syzkaller", 0 [pid 7545] <... futex resumed>) = 0 [pid 7546] <... memfd_create resumed>) = 3 [pid 7545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7546] munmap(0x7f877d82c000, 138412032) = 0 [pid 7546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7546] close(3) = 0 [pid 7546] mkdir("./file0", 0777) = 0 [ 221.170620][ T7546] loop0: detected capacity change from 0 to 32768 [ 221.195102][ T7546] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7546) [ 221.211690][ T7546] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 221.220984][ T7546] BTRFS info (device loop0): force clearing of disk cache [ 221.228122][ T7546] BTRFS info (device loop0): setting nodatasum [ 221.234332][ T7546] BTRFS info (device loop0): allowing degraded mounts [ 221.241113][ T7546] BTRFS info (device loop0): enabling disk space caching [ 221.248212][ T7546] BTRFS info (device loop0): disk space caching is enabled [ 221.270629][ T7546] BTRFS info (device loop0): enabling ssd optimizations [ 221.277763][ T7546] BTRFS info (device loop0): auto enabling async discard [ 221.285918][ T7546] BTRFS info (device loop0): rebuilding free space tree [ 221.297990][ T7546] BTRFS info (device loop0): disabling free space tree [ 221.304976][ T7546] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7546] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7546] chdir("./file0") = 0 [pid 7546] ioctl(4, LOOP_CLR_FD) = 0 [pid 7546] close(4) = 0 [pid 7546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7545] <... futex resumed>) = 0 [pid 7546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7545] <... futex resumed>) = 0 [pid 7546] open("./file0", O_RDONLY [pid 7545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7546] <... open resumed>) = 4 [pid 7546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7545] <... futex resumed>) = 0 [pid 7545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 221.314707][ T7546] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.327911][ T7546] BTRFS info (device loop0): checking UUID tree [pid 7545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7546] <... futex resumed>) = 0 [pid 7546] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7545] <... futex resumed>) = 0 [pid 7545] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7546] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7545] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7545] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7545] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[374]}, 88) = 374 [pid 7545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7545] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7545] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7564 attached [pid 7564] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7564] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7564] open("./file0", O_RDONLY) = 5 [pid 7564] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7545] <... futex resumed>) = 0 [ 221.420887][ T7546] BTRFS info (device loop0): balance: start -d -m [ 221.430514][ T7546] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 221.459245][ T7546] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7564] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7545] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7545] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7564] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 221.528133][ T7546] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7564] <... ioctl resumed>) = 0 [pid 7564] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7546] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7546] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7545] close(3) = 0 [pid 7545] close(4) = 0 [pid 7545] close(5) = 0 [pid 7545] close(6) = -1 EBADF (Bad file descriptor) [pid 7545] close(7) = -1 EBADF (Bad file descriptor) [pid 7545] close(8) = -1 EBADF (Bad file descriptor) [pid 7545] close(9) = -1 EBADF (Bad file descriptor) [pid 7545] close(10) = -1 EBADF (Bad file descriptor) [pid 7545] close(11) = -1 EBADF (Bad file descriptor) [pid 7545] close(12) = -1 EBADF (Bad file descriptor) [pid 7545] close(13) = -1 EBADF (Bad file descriptor) [pid 7545] close(14) = -1 EBADF (Bad file descriptor) [pid 7545] close(15) = -1 EBADF (Bad file descriptor) [pid 7545] close(16) = -1 EBADF (Bad file descriptor) [pid 7545] close(17) = -1 EBADF (Bad file descriptor) [pid 7545] close(18) = -1 EBADF (Bad file descriptor) [pid 7545] close(19) = -1 EBADF (Bad file descriptor) [ 221.595401][ T7546] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 221.616001][ T7546] BTRFS info (device loop0): balance: ended with status: 0 [pid 7545] close(20) = -1 EBADF (Bad file descriptor) [pid 7545] close(21) = -1 EBADF (Bad file descriptor) [pid 7545] close(22) = -1 EBADF (Bad file descriptor) [pid 7545] close(23) = -1 EBADF (Bad file descriptor) [pid 7545] close(24) = -1 EBADF (Bad file descriptor) [pid 7545] close(25) = -1 EBADF (Bad file descriptor) [pid 7545] close(26) = -1 EBADF (Bad file descriptor) [pid 7545] close(27) = -1 EBADF (Bad file descriptor) [pid 7545] close(28) = -1 EBADF (Bad file descriptor) [pid 7545] close(29) = -1 EBADF (Bad file descriptor) [pid 7545] exit_group(0 [pid 7564] <... futex resumed>) = ? [pid 7546] <... futex resumed>) = ? [pid 7545] <... exit_group resumed>) = ? [pid 7546] +++ exited with 0 +++ [pid 7564] +++ exited with 0 +++ [pid 7545] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=372, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./123/binderfs") = 0 [pid 5073] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./123/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./123") = 0 [pid 5073] mkdir("./124", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7565 attached [pid 7565] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 375 [pid 7565] <... set_robust_list resumed>) = 0 [pid 7565] chdir("./124") = 0 [pid 7565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7565] setpgid(0, 0) = 0 [pid 7565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7565] write(3, "1000", 4) = 4 [pid 7565] close(3) = 0 [pid 7565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7565] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7565] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7566 attached [pid 7566] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7565] <... clone3 resumed> => {parent_tid=[376]}, 88) = 376 [pid 7566] <... rseq resumed>) = 0 [pid 7565] rt_sigprocmask(SIG_SETMASK, [], [pid 7566] set_robust_list(0x7f8785c4c9a0, 24 [pid 7565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7566] <... set_robust_list resumed>) = 0 [pid 7565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7565] <... futex resumed>) = 0 [pid 7565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7566] memfd_create("syzkaller", 0) = 3 [pid 7566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7566] munmap(0x7f877d82c000, 138412032) = 0 [pid 7566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7566] close(3) = 0 [pid 7566] mkdir("./file0", 0777) = 0 [ 222.292907][ T7566] loop0: detected capacity change from 0 to 32768 [ 222.307845][ T7566] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7566) [ 222.324779][ T7566] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 222.334045][ T7566] BTRFS info (device loop0): force clearing of disk cache [ 222.341138][ T7566] BTRFS info (device loop0): setting nodatasum [ 222.348001][ T7566] BTRFS info (device loop0): allowing degraded mounts [ 222.354854][ T7566] BTRFS info (device loop0): enabling disk space caching [ 222.361988][ T7566] BTRFS info (device loop0): disk space caching is enabled [ 222.384945][ T7566] BTRFS info (device loop0): enabling ssd optimizations [ 222.391895][ T7566] BTRFS info (device loop0): auto enabling async discard [ 222.399952][ T7566] BTRFS info (device loop0): rebuilding free space tree [ 222.412147][ T7566] BTRFS info (device loop0): disabling free space tree [ 222.419111][ T7566] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 222.428777][ T7566] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7566] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7566] chdir("./file0") = 0 [pid 7566] ioctl(4, LOOP_CLR_FD) = 0 [pid 7566] close(4) = 0 [pid 7566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7565] <... futex resumed>) = 0 [pid 7566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7565] <... futex resumed>) = 0 [pid 7566] open("./file0", O_RDONLY [pid 7565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7566] <... open resumed>) = 4 [ 222.441936][ T7566] BTRFS info (device loop0): checking UUID tree [pid 7566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7565] <... futex resumed>) = 0 [pid 7565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7566] <... futex resumed>) = 0 [pid 7565] <... futex resumed>) = 1 [pid 7566] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7566] <... ioctl resumed>) = 0 [pid 7566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7565] <... futex resumed>) = 0 [pid 7565] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7566] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7565] <... futex resumed>) = 0 [ 222.512979][ T7566] BTRFS info (device loop0): balance: start -d -m [ 222.524847][ T7566] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7565] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7565] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7565] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[377]}, 88) = 377 [pid 7565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7565] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7565] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7584 attached [pid 7584] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7584] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7584] open("./file0", O_RDONLY) = 5 [pid 7584] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7584] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7565] <... futex resumed>) = 0 [pid 7565] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7584] <... futex resumed>) = 0 [pid 7565] <... futex resumed>) = 1 [pid 7584] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 222.554160][ T7566] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7565] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7584] <... ioctl resumed>) = 0 [pid 7584] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7584] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7566] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 7566] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7566] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7565] close(3) = 0 [pid 7565] close(4) = 0 [pid 7565] close(5) = 0 [pid 7565] close(6) = -1 EBADF (Bad file descriptor) [pid 7565] close(7) = -1 EBADF (Bad file descriptor) [pid 7565] close(8) = -1 EBADF (Bad file descriptor) [pid 7565] close(9) = -1 EBADF (Bad file descriptor) [pid 7565] close(10) = -1 EBADF (Bad file descriptor) [pid 7565] close(11) = -1 EBADF (Bad file descriptor) [pid 7565] close(12) = -1 EBADF (Bad file descriptor) [ 222.700053][ T7566] BTRFS info (device loop0): 1 enospc errors during balance [ 222.707760][ T7566] BTRFS info (device loop0): balance: ended with status: -28 [pid 7565] close(13) = -1 EBADF (Bad file descriptor) [pid 7565] close(14) = -1 EBADF (Bad file descriptor) [pid 7565] close(15) = -1 EBADF (Bad file descriptor) [pid 7565] close(16) = -1 EBADF (Bad file descriptor) [pid 7565] close(17) = -1 EBADF (Bad file descriptor) [pid 7565] close(18) = -1 EBADF (Bad file descriptor) [pid 7565] close(19) = -1 EBADF (Bad file descriptor) [pid 7565] close(20) = -1 EBADF (Bad file descriptor) [pid 7565] close(21) = -1 EBADF (Bad file descriptor) [pid 7565] close(22) = -1 EBADF (Bad file descriptor) [pid 7565] close(23) = -1 EBADF (Bad file descriptor) [pid 7565] close(24) = -1 EBADF (Bad file descriptor) [pid 7565] close(25) = -1 EBADF (Bad file descriptor) [pid 7565] close(26) = -1 EBADF (Bad file descriptor) [pid 7565] close(27) = -1 EBADF (Bad file descriptor) [pid 7565] close(28) = -1 EBADF (Bad file descriptor) [pid 7565] close(29) = -1 EBADF (Bad file descriptor) [pid 7565] exit_group(0) = ? [pid 7584] <... futex resumed>) = ? [pid 7566] <... futex resumed>) = ? [pid 7584] +++ exited with 0 +++ [pid 7566] +++ exited with 0 +++ [pid 7565] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=375, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=38 /* 0.38 s */} --- [pid 5073] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./124/binderfs") = 0 [pid 5073] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./124/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./124") = 0 [pid 5073] mkdir("./125", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7585 attached , child_tidptr=0x5555570a9690) = 378 [pid 7585] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7585] chdir("./125") = 0 [pid 7585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7585] setpgid(0, 0) = 0 [pid 7585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7585] write(3, "1000", 4) = 4 [pid 7585] close(3) = 0 [pid 7585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7585] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7585] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7586 attached [pid 7586] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7585] <... clone3 resumed> => {parent_tid=[379]}, 88) = 379 [pid 7586] <... rseq resumed>) = 0 [pid 7585] rt_sigprocmask(SIG_SETMASK, [], [pid 7586] set_robust_list(0x7f8785c4c9a0, 24 [pid 7585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7586] <... set_robust_list resumed>) = 0 [pid 7585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] rt_sigprocmask(SIG_SETMASK, [], [pid 7585] <... futex resumed>) = 0 [pid 7586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7586] memfd_create("syzkaller", 0) = 3 [pid 7586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7586] munmap(0x7f877d82c000, 138412032) = 0 [pid 7586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7586] close(3) = 0 [pid 7586] mkdir("./file0", 0777) = 0 [ 223.415537][ T7586] loop0: detected capacity change from 0 to 32768 [ 223.430494][ T7586] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7586) [ 223.446311][ T7586] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 223.455580][ T7586] BTRFS info (device loop0): force clearing of disk cache [ 223.462685][ T7586] BTRFS info (device loop0): setting nodatasum [ 223.469077][ T7586] BTRFS info (device loop0): allowing degraded mounts [ 223.475866][ T7586] BTRFS info (device loop0): enabling disk space caching [ 223.482878][ T7586] BTRFS info (device loop0): disk space caching is enabled [ 223.505536][ T7586] BTRFS info (device loop0): enabling ssd optimizations [ 223.512486][ T7586] BTRFS info (device loop0): auto enabling async discard [ 223.520642][ T7586] BTRFS info (device loop0): rebuilding free space tree [ 223.532131][ T7586] BTRFS info (device loop0): disabling free space tree [ 223.539469][ T7586] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.549404][ T7586] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7586] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7586] chdir("./file0") = 0 [pid 7586] ioctl(4, LOOP_CLR_FD) = 0 [pid 7586] close(4) = 0 [pid 7586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7585] <... futex resumed>) = 0 [pid 7586] open("./file0", O_RDONLY [pid 7585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] <... open resumed>) = 4 [pid 7586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7586] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7585] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 223.563313][ T7586] BTRFS info (device loop0): checking UUID tree [pid 7585] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7585] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7585] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7604 attached [pid 7604] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7585] <... clone3 resumed> => {parent_tid=[380]}, 88) = 380 [pid 7604] <... rseq resumed>) = 0 [pid 7585] rt_sigprocmask(SIG_SETMASK, [], [pid 7604] set_robust_list(0x7f8785c2b9a0, 24 [pid 7585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7585] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... set_robust_list resumed>) = 0 [pid 7604] rt_sigprocmask(SIG_SETMASK, [], [pid 7585] <... futex resumed>) = 0 [pid 7604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7604] open("./file0", O_RDONLY) = 5 [pid 7604] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7604] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7585] <... futex resumed>) = 0 [pid 7604] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 223.610506][ T7586] BTRFS info (device loop0): balance: start -d -m [ 223.619423][ T7586] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 223.647359][ T7586] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7585] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7604] <... ioctl resumed>) = 0 [pid 7604] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 223.824823][ T7586] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 223.848592][ T7586] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7604] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7586] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] close(3) = 0 [pid 7585] close(4) = 0 [pid 7585] close(5) = 0 [pid 7585] close(6) = -1 EBADF (Bad file descriptor) [pid 7585] close(7) = -1 EBADF (Bad file descriptor) [pid 7585] close(8) = -1 EBADF (Bad file descriptor) [ 223.868185][ T7586] BTRFS info (device loop0): balance: ended with status: 0 [pid 7585] close(9) = -1 EBADF (Bad file descriptor) [pid 7585] close(10) = -1 EBADF (Bad file descriptor) [pid 7585] close(11) = -1 EBADF (Bad file descriptor) [pid 7585] close(12) = -1 EBADF (Bad file descriptor) [pid 7585] close(13) = -1 EBADF (Bad file descriptor) [pid 7585] close(14) = -1 EBADF (Bad file descriptor) [pid 7585] close(15) = -1 EBADF (Bad file descriptor) [pid 7585] close(16) = -1 EBADF (Bad file descriptor) [pid 7585] close(17) = -1 EBADF (Bad file descriptor) [pid 7585] close(18) = -1 EBADF (Bad file descriptor) [pid 7585] close(19) = -1 EBADF (Bad file descriptor) [pid 7585] close(20) = -1 EBADF (Bad file descriptor) [pid 7585] close(21) = -1 EBADF (Bad file descriptor) [pid 7585] close(22) = -1 EBADF (Bad file descriptor) [pid 7585] close(23) = -1 EBADF (Bad file descriptor) [pid 7585] close(24) = -1 EBADF (Bad file descriptor) [pid 7585] close(25) = -1 EBADF (Bad file descriptor) [pid 7585] close(26) = -1 EBADF (Bad file descriptor) [pid 7585] close(27) = -1 EBADF (Bad file descriptor) [pid 7585] close(28) = -1 EBADF (Bad file descriptor) [pid 7585] close(29) = -1 EBADF (Bad file descriptor) [pid 7585] exit_group(0 [pid 7604] <... futex resumed>) = ? [pid 7604] +++ exited with 0 +++ [pid 7586] <... futex resumed>) = ? [pid 7585] <... exit_group resumed>) = ? [pid 7586] +++ exited with 0 +++ [pid 7585] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./125/binderfs") = 0 [pid 5073] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./125/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./125") = 0 [pid 5073] mkdir("./126", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7605 attached [pid 7605] set_robust_list(0x5555570a96a0, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 381 [pid 7605] chdir("./126") = 0 [pid 7605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7605] setpgid(0, 0) = 0 [pid 7605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7605] write(3, "1000", 4) = 4 [pid 7605] close(3) = 0 [pid 7605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7605] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7605] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7606 attached [pid 7606] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7605] <... clone3 resumed> => {parent_tid=[382]}, 88) = 382 [pid 7606] set_robust_list(0x7f8785c4c9a0, 24 [pid 7605] rt_sigprocmask(SIG_SETMASK, [], [pid 7606] <... set_robust_list resumed>) = 0 [pid 7606] rt_sigprocmask(SIG_SETMASK, [], [pid 7605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7606] memfd_create("syzkaller", 0 [pid 7605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7606] <... memfd_create resumed>) = 3 [pid 7606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7606] munmap(0x7f877d82c000, 138412032) = 0 [pid 7606] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7606] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7606] close(3) = 0 [pid 7606] mkdir("./file0", 0777) = 0 [ 224.522657][ T7606] loop0: detected capacity change from 0 to 32768 [ 224.547663][ T7606] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7606) [ 224.564502][ T7606] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 224.573750][ T7606] BTRFS info (device loop0): force clearing of disk cache [ 224.580917][ T7606] BTRFS info (device loop0): setting nodatasum [ 224.587140][ T7606] BTRFS info (device loop0): allowing degraded mounts [ 224.594000][ T7606] BTRFS info (device loop0): enabling disk space caching [ 224.601026][ T7606] BTRFS info (device loop0): disk space caching is enabled [ 224.623071][ T7606] BTRFS info (device loop0): enabling ssd optimizations [ 224.630215][ T7606] BTRFS info (device loop0): auto enabling async discard [ 224.638119][ T7606] BTRFS info (device loop0): rebuilding free space tree [ 224.650802][ T7606] BTRFS info (device loop0): disabling free space tree [ 224.657722][ T7606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7606] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7606] chdir("./file0") = 0 [pid 7606] ioctl(4, LOOP_CLR_FD) = 0 [pid 7606] close(4) = 0 [pid 7606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... futex resumed>) = 0 [pid 7606] <... futex resumed>) = 1 [pid 7605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] open("./file0", O_RDONLY [pid 7605] <... futex resumed>) = 0 [pid 7606] <... open resumed>) = 4 [ 224.667401][ T7606] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.680361][ T7606] BTRFS info (device loop0): checking UUID tree [pid 7605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] <... futex resumed>) = 0 [pid 7606] <... futex resumed>) = 1 [pid 7605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7605] <... futex resumed>) = 0 [pid 7606] <... ioctl resumed>) = 0 [pid 7605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7605] <... futex resumed>) = 0 [pid 7606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7605] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7606] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7605] <... futex resumed>) = 0 [pid 7605] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7605] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7605] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[383]}, 88) = 383 ./strace-static-x86_64: Process 7624 attached [pid 7605] rt_sigprocmask(SIG_SETMASK, [], [pid 7624] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7624] <... rseq resumed>) = 0 [pid 7624] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7624] rt_sigprocmask(SIG_SETMASK, [], [pid 7605] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7605] <... futex resumed>) = 0 [pid 7624] open("./file0", O_RDONLY [pid 7605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7624] <... open resumed>) = 5 [pid 7624] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7605] <... futex resumed>) = 0 [pid 7624] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7605] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 224.761692][ T7606] BTRFS info (device loop0): balance: start -d -m [ 224.771031][ T7606] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 224.800699][ T7606] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7605] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7624] <... ioctl resumed>) = 0 [pid 7624] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 224.955734][ T7606] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 224.980504][ T7606] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7624] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7606] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7606] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7606] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7605] close(3) = 0 [pid 7605] close(4) = 0 [pid 7605] close(5) = 0 [pid 7605] close(6) = -1 EBADF (Bad file descriptor) [pid 7605] close(7) = -1 EBADF (Bad file descriptor) [pid 7605] close(8) = -1 EBADF (Bad file descriptor) [ 225.000332][ T7606] BTRFS info (device loop0): balance: ended with status: 0 [pid 7605] close(9) = -1 EBADF (Bad file descriptor) [pid 7605] close(10) = -1 EBADF (Bad file descriptor) [pid 7605] close(11) = -1 EBADF (Bad file descriptor) [pid 7605] close(12) = -1 EBADF (Bad file descriptor) [pid 7605] close(13) = -1 EBADF (Bad file descriptor) [pid 7605] close(14) = -1 EBADF (Bad file descriptor) [pid 7605] close(15) = -1 EBADF (Bad file descriptor) [pid 7605] close(16) = -1 EBADF (Bad file descriptor) [pid 7605] close(17) = -1 EBADF (Bad file descriptor) [pid 7605] close(18) = -1 EBADF (Bad file descriptor) [pid 7605] close(19) = -1 EBADF (Bad file descriptor) [pid 7605] close(20) = -1 EBADF (Bad file descriptor) [pid 7605] close(21) = -1 EBADF (Bad file descriptor) [pid 7605] close(22) = -1 EBADF (Bad file descriptor) [pid 7605] close(23) = -1 EBADF (Bad file descriptor) [pid 7605] close(24) = -1 EBADF (Bad file descriptor) [pid 7605] close(25) = -1 EBADF (Bad file descriptor) [pid 7605] close(26) = -1 EBADF (Bad file descriptor) [pid 7605] close(27) = -1 EBADF (Bad file descriptor) [pid 7605] close(28) = -1 EBADF (Bad file descriptor) [pid 7605] close(29) = -1 EBADF (Bad file descriptor) [pid 7605] exit_group(0 [pid 7624] <... futex resumed>) = ? [pid 7624] +++ exited with 0 +++ [pid 7605] <... exit_group resumed>) = ? [pid 7606] <... futex resumed>) = ? [pid 7606] +++ exited with 0 +++ [pid 7605] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=381, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./126/binderfs") = 0 [pid 5073] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./126/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./126") = 0 [pid 5073] mkdir("./127", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7625 attached , child_tidptr=0x5555570a9690) = 384 [pid 7625] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7625] chdir("./127") = 0 [pid 7625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7625] setpgid(0, 0) = 0 [pid 7625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7625] write(3, "1000", 4) = 4 [pid 7625] close(3) = 0 [pid 7625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7625] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7625] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7626 attached [pid 7626] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7626] set_robust_list(0x7f8785c4c9a0, 24 [pid 7625] <... clone3 resumed> => {parent_tid=[385]}, 88) = 385 [pid 7626] <... set_robust_list resumed>) = 0 [pid 7625] rt_sigprocmask(SIG_SETMASK, [], [pid 7626] rt_sigprocmask(SIG_SETMASK, [], [pid 7625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] memfd_create("syzkaller", 0 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7626] <... memfd_create resumed>) = 3 [pid 7626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7626] munmap(0x7f877d82c000, 138412032) = 0 [pid 7626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7626] close(3) = 0 [pid 7626] mkdir("./file0", 0777) = 0 [ 225.563204][ T7626] loop0: detected capacity change from 0 to 32768 [ 225.577431][ T7626] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7626) [ 225.592696][ T7626] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 225.602000][ T7626] BTRFS info (device loop0): force clearing of disk cache [ 225.609141][ T7626] BTRFS info (device loop0): setting nodatasum [ 225.615350][ T7626] BTRFS info (device loop0): allowing degraded mounts [ 225.622123][ T7626] BTRFS info (device loop0): enabling disk space caching [ 225.629201][ T7626] BTRFS info (device loop0): disk space caching is enabled [ 225.650580][ T7626] BTRFS info (device loop0): enabling ssd optimizations [ 225.657651][ T7626] BTRFS info (device loop0): auto enabling async discard [ 225.666317][ T7626] BTRFS info (device loop0): rebuilding free space tree [ 225.678517][ T7626] BTRFS info (device loop0): disabling free space tree [ 225.685456][ T7626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.695132][ T7626] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7626] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7626] chdir("./file0") = 0 [pid 7626] ioctl(4, LOOP_CLR_FD) = 0 [pid 7626] close(4) = 0 [pid 7626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7626] open("./file0", O_RDONLY [pid 7625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] <... open resumed>) = 4 [ 225.708005][ T7626] BTRFS info (device loop0): checking UUID tree [pid 7626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7625] <... futex resumed>) = 0 [pid 7626] <... ioctl resumed>) = 0 [pid 7626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] <... futex resumed>) = 0 [pid 7626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7625] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7626] <... futex resumed>) = 0 [pid 7625] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 225.787423][ T7626] BTRFS info (device loop0): balance: start -d -m [ 225.796417][ T7626] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7626] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7625] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7625] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[386]}, 88) = 386 [pid 7625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7625] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7644 attached [pid 7644] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7644] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7644] open("./file0", O_RDONLY) = 5 [pid 7644] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7644] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7625] <... futex resumed>) = 0 [pid 7644] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 225.830283][ T7626] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7625] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7644] <... ioctl resumed>) = 0 [pid 7644] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 225.971614][ T7626] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 225.995325][ T7626] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 226.014633][ T7626] BTRFS info (device loop0): balance: ended with status: 0 [pid 7644] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7626] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7626] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] close(3 [pid 7626] <... futex resumed>) = 0 [pid 7625] <... close resumed>) = 0 [pid 7626] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] close(4) = 0 [pid 7625] close(5) = 0 [pid 7625] close(6) = -1 EBADF (Bad file descriptor) [pid 7625] close(7) = -1 EBADF (Bad file descriptor) [pid 7625] close(8) = -1 EBADF (Bad file descriptor) [pid 7625] close(9) = -1 EBADF (Bad file descriptor) [pid 7625] close(10) = -1 EBADF (Bad file descriptor) [pid 7625] close(11) = -1 EBADF (Bad file descriptor) [pid 7625] close(12) = -1 EBADF (Bad file descriptor) [pid 7625] close(13) = -1 EBADF (Bad file descriptor) [pid 7625] close(14) = -1 EBADF (Bad file descriptor) [pid 7625] close(15) = -1 EBADF (Bad file descriptor) [pid 7625] close(16) = -1 EBADF (Bad file descriptor) [pid 7625] close(17) = -1 EBADF (Bad file descriptor) [pid 7625] close(18) = -1 EBADF (Bad file descriptor) [pid 7625] close(19) = -1 EBADF (Bad file descriptor) [pid 7625] close(20) = -1 EBADF (Bad file descriptor) [pid 7625] close(21) = -1 EBADF (Bad file descriptor) [pid 7625] close(22) = -1 EBADF (Bad file descriptor) [pid 7625] close(23) = -1 EBADF (Bad file descriptor) [pid 7625] close(24) = -1 EBADF (Bad file descriptor) [pid 7625] close(25) = -1 EBADF (Bad file descriptor) [pid 7625] close(26) = -1 EBADF (Bad file descriptor) [pid 7625] close(27) = -1 EBADF (Bad file descriptor) [pid 7625] close(28) = -1 EBADF (Bad file descriptor) [pid 7625] close(29) = -1 EBADF (Bad file descriptor) [pid 7625] exit_group(0 [pid 7644] <... futex resumed>) = ? [pid 7626] <... futex resumed>) = ? [pid 7625] <... exit_group resumed>) = ? [pid 7644] +++ exited with 0 +++ [pid 7626] +++ exited with 0 +++ [pid 7625] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=384, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=45 /* 0.45 s */} --- [pid 5073] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./127/binderfs") = 0 [pid 5073] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./127/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./127") = 0 [pid 5073] mkdir("./128", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7645 attached , child_tidptr=0x5555570a9690) = 387 [pid 7645] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7645] chdir("./128") = 0 [pid 7645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7645] setpgid(0, 0) = 0 [pid 7645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7645] write(3, "1000", 4) = 4 [pid 7645] close(3) = 0 [pid 7645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7645] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7645] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7646 attached [pid 7646] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7645] <... clone3 resumed> => {parent_tid=[388]}, 88) = 388 [pid 7646] <... rseq resumed>) = 0 [pid 7645] rt_sigprocmask(SIG_SETMASK, [], [pid 7646] set_robust_list(0x7f8785c4c9a0, 24 [pid 7645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7646] <... set_robust_list resumed>) = 0 [pid 7645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7646] rt_sigprocmask(SIG_SETMASK, [], [pid 7645] <... futex resumed>) = 0 [pid 7646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7646] memfd_create("syzkaller", 0) = 3 [pid 7646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7646] munmap(0x7f877d82c000, 138412032) = 0 [pid 7646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7646] close(3) = 0 [pid 7646] mkdir("./file0", 0777) = 0 [ 226.720908][ T7646] loop0: detected capacity change from 0 to 32768 [ 226.745358][ T7646] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7646) [ 226.761134][ T7646] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 226.770475][ T7646] BTRFS info (device loop0): force clearing of disk cache [ 226.777659][ T7646] BTRFS info (device loop0): setting nodatasum [ 226.783824][ T7646] BTRFS info (device loop0): allowing degraded mounts [ 226.790658][ T7646] BTRFS info (device loop0): enabling disk space caching [ 226.797799][ T7646] BTRFS info (device loop0): disk space caching is enabled [ 226.820293][ T7646] BTRFS info (device loop0): enabling ssd optimizations [ 226.827324][ T7646] BTRFS info (device loop0): auto enabling async discard [ 226.835428][ T7646] BTRFS info (device loop0): rebuilding free space tree [ 226.847503][ T7646] BTRFS info (device loop0): disabling free space tree [ 226.854772][ T7646] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7646] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7646] chdir("./file0") = 0 [pid 7646] ioctl(4, LOOP_CLR_FD) = 0 [pid 7646] close(4) = 0 [pid 7646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7645] <... futex resumed>) = 0 [pid 7645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7646] open("./file0", O_RDONLY) = 4 [pid 7646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7645] <... futex resumed>) = 0 [pid 7646] <... futex resumed>) = 1 [pid 7645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7646] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7646] <... ioctl resumed>) = 0 [ 226.864468][ T7646] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.877585][ T7646] BTRFS info (device loop0): checking UUID tree [pid 7646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] <... futex resumed>) = 0 [pid 7645] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7646] <... futex resumed>) = 0 [pid 7646] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7645] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7645] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7645] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[389]}, 88) = 389 [pid 7645] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7664 attached NULL, 8) = 0 [pid 7664] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7645] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... rseq resumed>) = 0 [pid 7645] <... futex resumed>) = 0 [pid 7664] set_robust_list(0x7f8785c2b9a0, 24 [pid 7645] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7664] <... set_robust_list resumed>) = 0 [pid 7664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7664] open("./file0", O_RDONLY) = 5 [pid 7664] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7645] <... futex resumed>) = 0 [pid 7664] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7645] <... futex resumed>) = 0 [pid 7664] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 226.949785][ T7646] BTRFS info (device loop0): balance: start -d -m [ 226.958877][ T7646] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 226.982725][ T7646] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7645] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7664] <... ioctl resumed>) = 0 [pid 7664] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 227.144272][ T7646] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 227.169171][ T7646] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7664] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7646] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7646] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7646] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] close(3) = 0 [pid 7645] close(4) = 0 [pid 7645] close(5) = 0 [pid 7645] close(6) = -1 EBADF (Bad file descriptor) [pid 7645] close(7) = -1 EBADF (Bad file descriptor) [pid 7645] close(8) = -1 EBADF (Bad file descriptor) [pid 7645] close(9) = -1 EBADF (Bad file descriptor) [ 227.189097][ T7646] BTRFS info (device loop0): balance: ended with status: 0 [pid 7645] close(10) = -1 EBADF (Bad file descriptor) [pid 7645] close(11) = -1 EBADF (Bad file descriptor) [pid 7645] close(12) = -1 EBADF (Bad file descriptor) [pid 7645] close(13) = -1 EBADF (Bad file descriptor) [pid 7645] close(14) = -1 EBADF (Bad file descriptor) [pid 7645] close(15) = -1 EBADF (Bad file descriptor) [pid 7645] close(16) = -1 EBADF (Bad file descriptor) [pid 7645] close(17) = -1 EBADF (Bad file descriptor) [pid 7645] close(18) = -1 EBADF (Bad file descriptor) [pid 7645] close(19) = -1 EBADF (Bad file descriptor) [pid 7645] close(20) = -1 EBADF (Bad file descriptor) [pid 7645] close(21) = -1 EBADF (Bad file descriptor) [pid 7645] close(22) = -1 EBADF (Bad file descriptor) [pid 7645] close(23) = -1 EBADF (Bad file descriptor) [pid 7645] close(24) = -1 EBADF (Bad file descriptor) [pid 7645] close(25) = -1 EBADF (Bad file descriptor) [pid 7645] close(26) = -1 EBADF (Bad file descriptor) [pid 7645] close(27) = -1 EBADF (Bad file descriptor) [pid 7645] close(28) = -1 EBADF (Bad file descriptor) [pid 7645] close(29) = -1 EBADF (Bad file descriptor) [pid 7645] exit_group(0 [pid 7664] <... futex resumed>) = ? [pid 7664] +++ exited with 0 +++ [pid 7645] <... exit_group resumed>) = ? [pid 7646] <... futex resumed>) = ? [pid 7646] +++ exited with 0 +++ [pid 7645] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=387, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./128/binderfs") = 0 [pid 5073] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./128/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./128") = 0 [pid 5073] mkdir("./129", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7665 attached , child_tidptr=0x5555570a9690) = 390 [pid 7665] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7665] chdir("./129") = 0 [pid 7665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7665] setpgid(0, 0) = 0 [pid 7665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7665] write(3, "1000", 4) = 4 [pid 7665] close(3) = 0 [pid 7665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7665] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7665] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7666 attached [pid 7666] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7666] set_robust_list(0x7f8785c4c9a0, 24 [pid 7665] <... clone3 resumed> => {parent_tid=[391]}, 88) = 391 [pid 7666] <... set_robust_list resumed>) = 0 [pid 7665] rt_sigprocmask(SIG_SETMASK, [], [pid 7666] rt_sigprocmask(SIG_SETMASK, [], [pid 7665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7666] memfd_create("syzkaller", 0 [pid 7665] <... futex resumed>) = 0 [pid 7665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7666] <... memfd_create resumed>) = 3 [pid 7666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7666] munmap(0x7f877d82c000, 138412032) = 0 [pid 7666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7666] close(3) = 0 [pid 7666] mkdir("./file0", 0777) = 0 [ 227.767827][ T7666] loop0: detected capacity change from 0 to 32768 [ 227.791487][ T7666] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7666) [ 227.806673][ T7666] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.815973][ T7666] BTRFS info (device loop0): force clearing of disk cache [ 227.823097][ T7666] BTRFS info (device loop0): setting nodatasum [ 227.829311][ T7666] BTRFS info (device loop0): allowing degraded mounts [ 227.836105][ T7666] BTRFS info (device loop0): enabling disk space caching [ 227.843113][ T7666] BTRFS info (device loop0): disk space caching is enabled [ 227.864666][ T7666] BTRFS info (device loop0): enabling ssd optimizations [ 227.871626][ T7666] BTRFS info (device loop0): auto enabling async discard [ 227.880478][ T7666] BTRFS info (device loop0): rebuilding free space tree [ 227.892409][ T7666] BTRFS info (device loop0): disabling free space tree [ 227.899400][ T7666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7666] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7666] chdir("./file0") = 0 [pid 7666] ioctl(4, LOOP_CLR_FD) = 0 [pid 7666] close(4) = 0 [pid 7666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7665] <... futex resumed>) = 0 [pid 7665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7666] <... futex resumed>) = 1 [pid 7665] <... futex resumed>) = 0 [pid 7666] open("./file0", O_RDONLY [pid 7665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7666] <... open resumed>) = 4 [pid 7666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7665] <... futex resumed>) = 0 [pid 7666] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7665] <... futex resumed>) = 0 [pid 7666] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7666] <... ioctl resumed>) = 0 [ 227.909157][ T7666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 227.922705][ T7666] BTRFS info (device loop0): checking UUID tree [pid 7666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7665] <... futex resumed>) = 0 [pid 7666] <... futex resumed>) = 1 [pid 7665] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7666] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7665] <... futex resumed>) = 0 [pid 7665] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7665] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7665] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7684 attached => {parent_tid=[392]}, 88) = 392 [pid 7665] rt_sigprocmask(SIG_SETMASK, [], [pid 7684] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7684] <... rseq resumed>) = 0 [ 228.005321][ T7666] BTRFS info (device loop0): balance: start -d -m [ 228.015750][ T7666] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 228.041101][ T7666] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7684] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7665] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7665] <... futex resumed>) = 0 [pid 7684] open("./file0", O_RDONLY [pid 7665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7684] <... open resumed>) = 5 [pid 7684] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7665] <... futex resumed>) = 0 [pid 7684] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7665] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7684] <... futex resumed>) = 0 [pid 7684] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7665] <... futex resumed>) = 1 [pid 7665] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7684] <... ioctl resumed>) = 0 [pid 7684] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 228.140917][ T7666] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7684] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7666] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7666] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7665] close(3 [pid 7666] <... futex resumed>) = 0 [pid 7665] <... close resumed>) = 0 [pid 7666] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7665] close(4) = 0 [pid 7665] close(5) = 0 [pid 7665] close(6) = -1 EBADF (Bad file descriptor) [pid 7665] close(7) = -1 EBADF (Bad file descriptor) [pid 7665] close(8) = -1 EBADF (Bad file descriptor) [pid 7665] close(9) = -1 EBADF (Bad file descriptor) [pid 7665] close(10) = -1 EBADF (Bad file descriptor) [pid 7665] close(11) = -1 EBADF (Bad file descriptor) [pid 7665] close(12) = -1 EBADF (Bad file descriptor) [pid 7665] close(13) = -1 EBADF (Bad file descriptor) [pid 7665] close(14) = -1 EBADF (Bad file descriptor) [pid 7665] close(15) = -1 EBADF (Bad file descriptor) [pid 7665] close(16) = -1 EBADF (Bad file descriptor) [pid 7665] close(17) = -1 EBADF (Bad file descriptor) [ 228.208318][ T7666] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 228.228578][ T7666] BTRFS info (device loop0): balance: ended with status: 0 [pid 7665] close(18) = -1 EBADF (Bad file descriptor) [pid 7665] close(19) = -1 EBADF (Bad file descriptor) [pid 7665] close(20) = -1 EBADF (Bad file descriptor) [pid 7665] close(21) = -1 EBADF (Bad file descriptor) [pid 7665] close(22) = -1 EBADF (Bad file descriptor) [pid 7665] close(23) = -1 EBADF (Bad file descriptor) [pid 7665] close(24) = -1 EBADF (Bad file descriptor) [pid 7665] close(25) = -1 EBADF (Bad file descriptor) [pid 7665] close(26) = -1 EBADF (Bad file descriptor) [pid 7665] close(27) = -1 EBADF (Bad file descriptor) [pid 7665] close(28) = -1 EBADF (Bad file descriptor) [pid 7665] close(29) = -1 EBADF (Bad file descriptor) [pid 7665] exit_group(0 [pid 7684] <... futex resumed>) = ? [pid 7666] <... futex resumed>) = ? [pid 7684] +++ exited with 0 +++ [pid 7666] +++ exited with 0 +++ [pid 7665] <... exit_group resumed>) = ? [pid 7665] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=390, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./129/binderfs") = 0 [pid 5073] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./129/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./129") = 0 [pid 5073] mkdir("./130", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7685 attached , child_tidptr=0x5555570a9690) = 393 [pid 7685] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7685] chdir("./130") = 0 [pid 7685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7685] setpgid(0, 0) = 0 [pid 7685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7685] write(3, "1000", 4) = 4 [pid 7685] close(3) = 0 [pid 7685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7685] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7685] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7686 attached [pid 7686] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7685] <... clone3 resumed> => {parent_tid=[394]}, 88) = 394 [pid 7686] <... rseq resumed>) = 0 [pid 7685] rt_sigprocmask(SIG_SETMASK, [], [pid 7686] set_robust_list(0x7f8785c4c9a0, 24 [pid 7685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7686] <... set_robust_list resumed>) = 0 [pid 7685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7685] <... futex resumed>) = 0 [pid 7686] memfd_create("syzkaller", 0 [pid 7685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7686] <... memfd_create resumed>) = 3 [pid 7686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7686] munmap(0x7f877d82c000, 138412032) = 0 [pid 7686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7686] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7686] close(3) = 0 [pid 7686] mkdir("./file0", 0777) = 0 [ 228.782303][ T7686] loop0: detected capacity change from 0 to 32768 [ 228.801935][ T7686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7686) [ 228.819530][ T7686] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 228.828916][ T7686] BTRFS info (device loop0): force clearing of disk cache [ 228.836089][ T7686] BTRFS info (device loop0): setting nodatasum [ 228.842235][ T7686] BTRFS info (device loop0): allowing degraded mounts [ 228.849051][ T7686] BTRFS info (device loop0): enabling disk space caching [ 228.856122][ T7686] BTRFS info (device loop0): disk space caching is enabled [ 228.878465][ T7686] BTRFS info (device loop0): enabling ssd optimizations [ 228.885503][ T7686] BTRFS info (device loop0): auto enabling async discard [ 228.893407][ T7686] BTRFS info (device loop0): rebuilding free space tree [ 228.905650][ T7686] BTRFS info (device loop0): disabling free space tree [ 228.912549][ T7686] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.922348][ T7686] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7686] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7686] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7686] chdir("./file0") = 0 [pid 7686] ioctl(4, LOOP_CLR_FD) = 0 [pid 7686] close(4) = 0 [pid 7686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7685] <... futex resumed>) = 0 [pid 7685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] open("./file0", O_RDONLY [pid 7685] <... futex resumed>) = 0 [pid 7686] <... open resumed>) = 4 [pid 7685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 228.935700][ T7686] BTRFS info (device loop0): checking UUID tree [pid 7686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7685] <... futex resumed>) = 0 [pid 7686] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] <... ioctl resumed>) = 0 [pid 7685] <... futex resumed>) = 0 [pid 7686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7686] <... futex resumed>) = 0 [pid 7685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7686] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7685] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7685] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7685] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7685] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7704 attached => {parent_tid=[395]}, 88) = 395 [pid 7704] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7685] rt_sigprocmask(SIG_SETMASK, [], [pid 7704] set_robust_list(0x7f8785c2b9a0, 24 [pid 7685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7704] <... set_robust_list resumed>) = 0 [pid 7685] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] rt_sigprocmask(SIG_SETMASK, [], [pid 7685] <... futex resumed>) = 0 [pid 7704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7685] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7704] open("./file0", O_RDONLY) = 5 [pid 7704] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7685] <... futex resumed>) = 0 [ 229.011082][ T7686] BTRFS info (device loop0): balance: start -d -m [ 229.020476][ T7686] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 229.045453][ T7686] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7704] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7685] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7685] <... futex resumed>) = 0 [pid 7704] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7685] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7704] <... ioctl resumed>) = 0 [pid 7704] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 229.199288][ T7686] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 229.223135][ T7686] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7704] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7686] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7686] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7686] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7685] close(3) = 0 [pid 7685] close(4) = 0 [pid 7685] close(5) = 0 [pid 7685] close(6) = -1 EBADF (Bad file descriptor) [pid 7685] close(7) = -1 EBADF (Bad file descriptor) [pid 7685] close(8) = -1 EBADF (Bad file descriptor) [pid 7685] close(9) = -1 EBADF (Bad file descriptor) [ 229.243360][ T7686] BTRFS info (device loop0): balance: ended with status: 0 [pid 7685] close(10) = -1 EBADF (Bad file descriptor) [pid 7685] close(11) = -1 EBADF (Bad file descriptor) [pid 7685] close(12) = -1 EBADF (Bad file descriptor) [pid 7685] close(13) = -1 EBADF (Bad file descriptor) [pid 7685] close(14) = -1 EBADF (Bad file descriptor) [pid 7685] close(15) = -1 EBADF (Bad file descriptor) [pid 7685] close(16) = -1 EBADF (Bad file descriptor) [pid 7685] close(17) = -1 EBADF (Bad file descriptor) [pid 7685] close(18) = -1 EBADF (Bad file descriptor) [pid 7685] close(19) = -1 EBADF (Bad file descriptor) [pid 7685] close(20) = -1 EBADF (Bad file descriptor) [pid 7685] close(21) = -1 EBADF (Bad file descriptor) [pid 7685] close(22) = -1 EBADF (Bad file descriptor) [pid 7685] close(23) = -1 EBADF (Bad file descriptor) [pid 7685] close(24) = -1 EBADF (Bad file descriptor) [pid 7685] close(25) = -1 EBADF (Bad file descriptor) [pid 7685] close(26) = -1 EBADF (Bad file descriptor) [pid 7685] close(27) = -1 EBADF (Bad file descriptor) [pid 7685] close(28) = -1 EBADF (Bad file descriptor) [pid 7685] close(29) = -1 EBADF (Bad file descriptor) [pid 7685] exit_group(0 [pid 7686] <... futex resumed>) = ? [pid 7685] <... exit_group resumed>) = ? [pid 7686] +++ exited with 0 +++ [pid 7704] <... futex resumed>) = ? [pid 7704] +++ exited with 0 +++ [pid 7685] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=393, si_uid=0, si_status=0, si_utime=0, si_stime=46 /* 0.46 s */} --- [pid 5073] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./130/binderfs") = 0 [pid 5073] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./130/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./130") = 0 [pid 5073] mkdir("./131", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7705 attached [pid 7705] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7705] chdir("./131" [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 396 [pid 7705] <... chdir resumed>) = 0 [pid 7705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7705] setpgid(0, 0) = 0 [pid 7705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7705] write(3, "1000", 4) = 4 [pid 7705] close(3) = 0 [pid 7705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7705] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7705] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7706 attached [pid 7706] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7705] <... clone3 resumed> => {parent_tid=[397]}, 88) = 397 [pid 7706] <... rseq resumed>) = 0 [pid 7705] rt_sigprocmask(SIG_SETMASK, [], [pid 7706] set_robust_list(0x7f8785c4c9a0, 24 [pid 7705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7706] <... set_robust_list resumed>) = 0 [pid 7705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7705] <... futex resumed>) = 0 [pid 7706] memfd_create("syzkaller", 0 [pid 7705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7706] <... memfd_create resumed>) = 3 [pid 7706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7706] munmap(0x7f877d82c000, 138412032) = 0 [pid 7706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7706] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7706] close(3) = 0 [pid 7706] mkdir("./file0", 0777) = 0 [ 229.897546][ T7706] loop0: detected capacity change from 0 to 32768 [ 229.915305][ T7706] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7706) [ 229.930892][ T7706] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 229.940193][ T7706] BTRFS info (device loop0): force clearing of disk cache [ 229.947346][ T7706] BTRFS info (device loop0): setting nodatasum [ 229.953509][ T7706] BTRFS info (device loop0): allowing degraded mounts [ 229.960351][ T7706] BTRFS info (device loop0): enabling disk space caching [ 229.967406][ T7706] BTRFS info (device loop0): disk space caching is enabled [ 229.989465][ T7706] BTRFS info (device loop0): enabling ssd optimizations [ 229.996513][ T7706] BTRFS info (device loop0): auto enabling async discard [ 230.004847][ T7706] BTRFS info (device loop0): rebuilding free space tree [ 230.017628][ T7706] BTRFS info (device loop0): disabling free space tree [ 230.024578][ T7706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.034243][ T7706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7706] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7706] chdir("./file0") = 0 [pid 7706] ioctl(4, LOOP_CLR_FD) = 0 [pid 7706] close(4) = 0 [pid 7706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] <... futex resumed>) = 0 [pid 7705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] <... futex resumed>) = 1 [pid 7705] <... futex resumed>) = 0 [pid 7706] open("./file0", O_RDONLY [pid 7705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... open resumed>) = 4 [pid 7706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7705] <... futex resumed>) = 0 [pid 7706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7705] <... futex resumed>) = 0 [pid 7706] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... ioctl resumed>) = 0 [ 230.047227][ T7706] BTRFS info (device loop0): checking UUID tree [pid 7706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] <... futex resumed>) = 0 [pid 7706] <... futex resumed>) = 1 [pid 7705] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7705] <... futex resumed>) = 0 [pid 7705] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7705] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7705] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7724 attached => {parent_tid=[398]}, 88) = 398 [pid 7705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7705] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7724] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7705] <... futex resumed>) = 0 [pid 7724] <... rseq resumed>) = 0 [pid 7705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7724] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 230.113831][ T7706] BTRFS info (device loop0): balance: start -d -m [ 230.123267][ T7706] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 230.153607][ T7706] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7724] open("./file0", O_RDONLY) = 5 [pid 7724] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7705] <... futex resumed>) = 0 [pid 7724] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7705] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7705] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7724] <... ioctl resumed>) = 0 [pid 7724] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 230.297414][ T7706] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 230.325444][ T7706] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7724] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7706] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7706] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7706] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7705] close(3) = 0 [pid 7705] close(4) = 0 [pid 7705] close(5) = 0 [pid 7705] close(6) = -1 EBADF (Bad file descriptor) [pid 7705] close(7) = -1 EBADF (Bad file descriptor) [pid 7705] close(8) = -1 EBADF (Bad file descriptor) [pid 7705] close(9) = -1 EBADF (Bad file descriptor) [pid 7705] close(10) = -1 EBADF (Bad file descriptor) [pid 7705] close(11) = -1 EBADF (Bad file descriptor) [pid 7705] close(12) = -1 EBADF (Bad file descriptor) [ 230.345545][ T7706] BTRFS info (device loop0): balance: ended with status: 0 [pid 7705] close(13) = -1 EBADF (Bad file descriptor) [pid 7705] close(14) = -1 EBADF (Bad file descriptor) [pid 7705] close(15) = -1 EBADF (Bad file descriptor) [pid 7705] close(16) = -1 EBADF (Bad file descriptor) [pid 7705] close(17) = -1 EBADF (Bad file descriptor) [pid 7705] close(18) = -1 EBADF (Bad file descriptor) [pid 7705] close(19) = -1 EBADF (Bad file descriptor) [pid 7705] close(20) = -1 EBADF (Bad file descriptor) [pid 7705] close(21) = -1 EBADF (Bad file descriptor) [pid 7705] close(22) = -1 EBADF (Bad file descriptor) [pid 7705] close(23) = -1 EBADF (Bad file descriptor) [pid 7705] close(24) = -1 EBADF (Bad file descriptor) [pid 7705] close(25) = -1 EBADF (Bad file descriptor) [pid 7705] close(26) = -1 EBADF (Bad file descriptor) [pid 7705] close(27) = -1 EBADF (Bad file descriptor) [pid 7705] close(28) = -1 EBADF (Bad file descriptor) [pid 7705] close(29) = -1 EBADF (Bad file descriptor) [pid 7705] exit_group(0 [pid 7724] <... futex resumed>) = ? [pid 7724] +++ exited with 0 +++ [pid 7705] <... exit_group resumed>) = ? [pid 7706] <... futex resumed>) = ? [pid 7706] +++ exited with 0 +++ [pid 7705] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=396, si_uid=0, si_status=0, si_utime=0, si_stime=43 /* 0.43 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./131/binderfs") = 0 [pid 5073] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./131/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./131") = 0 [pid 5073] mkdir("./132", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7725 attached , child_tidptr=0x5555570a9690) = 399 [pid 7725] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7725] chdir("./132") = 0 [pid 7725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7725] setpgid(0, 0) = 0 [pid 7725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7725] write(3, "1000", 4) = 4 [pid 7725] close(3) = 0 [pid 7725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7725] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7725] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7726 attached [pid 7726] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7725] <... clone3 resumed> => {parent_tid=[400]}, 88) = 400 [pid 7726] <... rseq resumed>) = 0 [pid 7726] set_robust_list(0x7f8785c4c9a0, 24 [pid 7725] rt_sigprocmask(SIG_SETMASK, [], [pid 7726] <... set_robust_list resumed>) = 0 [pid 7725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7726] rt_sigprocmask(SIG_SETMASK, [], [pid 7725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7725] <... futex resumed>) = 0 [pid 7726] memfd_create("syzkaller", 0 [pid 7725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7726] <... memfd_create resumed>) = 3 [pid 7726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7726] munmap(0x7f877d82c000, 138412032) = 0 [pid 7726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7726] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7726] close(3) = 0 [pid 7726] mkdir("./file0", 0777) = 0 [ 231.039937][ T7726] loop0: detected capacity change from 0 to 32768 [ 231.055106][ T7726] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7726) [ 231.070960][ T7726] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 231.080342][ T7726] BTRFS info (device loop0): force clearing of disk cache [ 231.087546][ T7726] BTRFS info (device loop0): setting nodatasum [ 231.094181][ T7726] BTRFS info (device loop0): allowing degraded mounts [ 231.100949][ T7726] BTRFS info (device loop0): enabling disk space caching [ 231.107988][ T7726] BTRFS info (device loop0): disk space caching is enabled [ 231.130780][ T7726] BTRFS info (device loop0): enabling ssd optimizations [ 231.137791][ T7726] BTRFS info (device loop0): auto enabling async discard [ 231.145864][ T7726] BTRFS info (device loop0): rebuilding free space tree [ 231.157659][ T7726] BTRFS info (device loop0): disabling free space tree [ 231.164597][ T7726] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7726] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7726] chdir("./file0") = 0 [pid 7726] ioctl(4, LOOP_CLR_FD) = 0 [pid 7726] close(4) = 0 [pid 7726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] open("./file0", O_RDONLY [ 231.174311][ T7726] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.188342][ T7726] BTRFS info (device loop0): checking UUID tree [pid 7725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7726] <... open resumed>) = 4 [pid 7726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] <... futex resumed>) = 0 [pid 7725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... futex resumed>) = 0 [pid 7725] <... futex resumed>) = 1 [pid 7726] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7726] <... ioctl resumed>) = 0 [pid 7726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7725] <... futex resumed>) = 0 [pid 7726] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7725] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7725] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7725] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7744 attached [pid 7744] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7725] <... clone3 resumed> => {parent_tid=[401]}, 88) = 401 [pid 7725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7725] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7744] <... rseq resumed>) = 0 [pid 7744] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7744] open("./file0", O_RDONLY) = 5 [pid 7744] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7744] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7725] <... futex resumed>) = 0 [pid 7744] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 231.262575][ T7726] BTRFS info (device loop0): balance: start -d -m [ 231.271799][ T7726] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 231.300195][ T7726] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7725] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7744] <... ioctl resumed>) = 0 [pid 7744] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 231.468205][ T7726] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 231.492248][ T7726] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7744] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7726] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7726] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] close(3) = 0 [pid 7725] close(4) = 0 [pid 7725] close(5 [pid 7726] <... futex resumed>) = 0 [pid 7725] <... close resumed>) = 0 [pid 7726] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] close(6) = -1 EBADF (Bad file descriptor) [pid 7725] close(7) = -1 EBADF (Bad file descriptor) [pid 7725] close(8) = -1 EBADF (Bad file descriptor) [pid 7725] close(9) = -1 EBADF (Bad file descriptor) [pid 7725] close(10) = -1 EBADF (Bad file descriptor) [pid 7725] close(11) = -1 EBADF (Bad file descriptor) [pid 7725] close(12) = -1 EBADF (Bad file descriptor) [pid 7725] close(13) = -1 EBADF (Bad file descriptor) [ 231.512158][ T7726] BTRFS info (device loop0): balance: ended with status: 0 [pid 7725] close(14) = -1 EBADF (Bad file descriptor) [pid 7725] close(15) = -1 EBADF (Bad file descriptor) [pid 7725] close(16) = -1 EBADF (Bad file descriptor) [pid 7725] close(17) = -1 EBADF (Bad file descriptor) [pid 7725] close(18) = -1 EBADF (Bad file descriptor) [pid 7725] close(19) = -1 EBADF (Bad file descriptor) [pid 7725] close(20) = -1 EBADF (Bad file descriptor) [pid 7725] close(21) = -1 EBADF (Bad file descriptor) [pid 7725] close(22) = -1 EBADF (Bad file descriptor) [pid 7725] close(23) = -1 EBADF (Bad file descriptor) [pid 7725] close(24) = -1 EBADF (Bad file descriptor) [pid 7725] close(25) = -1 EBADF (Bad file descriptor) [pid 7725] close(26) = -1 EBADF (Bad file descriptor) [pid 7725] close(27) = -1 EBADF (Bad file descriptor) [pid 7725] close(28) = -1 EBADF (Bad file descriptor) [pid 7725] close(29) = -1 EBADF (Bad file descriptor) [pid 7725] exit_group(0 [pid 7744] <... futex resumed>) = ? [pid 7744] +++ exited with 0 +++ [pid 7725] <... exit_group resumed>) = ? [pid 7726] <... futex resumed>) = ? [pid 7726] +++ exited with 0 +++ [pid 7725] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./132/binderfs") = 0 [pid 5073] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./132/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./132") = 0 [pid 5073] mkdir("./133", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7746 attached , child_tidptr=0x5555570a9690) = 402 [pid 7746] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7746] chdir("./133") = 0 [pid 7746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7746] setpgid(0, 0) = 0 [pid 7746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7746] write(3, "1000", 4) = 4 [pid 7746] close(3) = 0 [pid 7746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7746] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7746] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7747 attached [pid 7747] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7747] set_robust_list(0x7f8785c4c9a0, 24 [pid 7746] <... clone3 resumed> => {parent_tid=[403]}, 88) = 403 [pid 7747] <... set_robust_list resumed>) = 0 [pid 7746] rt_sigprocmask(SIG_SETMASK, [], [pid 7747] rt_sigprocmask(SIG_SETMASK, [], [pid 7746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7746] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7747] memfd_create("syzkaller", 0 [pid 7746] <... futex resumed>) = 0 [pid 7747] <... memfd_create resumed>) = 3 [pid 7747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7746] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7747] munmap(0x7f877d82c000, 138412032) = 0 [pid 7747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7747] close(3) = 0 [pid 7747] mkdir("./file0", 0777) = 0 [ 232.115655][ T7747] loop0: detected capacity change from 0 to 32768 [ 232.130382][ T7747] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7747) [ 232.146624][ T7747] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 232.155892][ T7747] BTRFS info (device loop0): force clearing of disk cache [ 232.162987][ T7747] BTRFS info (device loop0): setting nodatasum [ 232.169167][ T7747] BTRFS info (device loop0): allowing degraded mounts [ 232.176091][ T7747] BTRFS info (device loop0): enabling disk space caching [ 232.183129][ T7747] BTRFS info (device loop0): disk space caching is enabled [ 232.205955][ T7747] BTRFS info (device loop0): enabling ssd optimizations [ 232.212927][ T7747] BTRFS info (device loop0): auto enabling async discard [ 232.221017][ T7747] BTRFS info (device loop0): rebuilding free space tree [ 232.232658][ T7747] BTRFS info (device loop0): disabling free space tree [ 232.239588][ T7747] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 232.249244][ T7747] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7747] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7747] chdir("./file0") = 0 [pid 7747] ioctl(4, LOOP_CLR_FD) = 0 [pid 7747] close(4) = 0 [ 232.262769][ T7747] BTRFS info (device loop0): checking UUID tree [pid 7747] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7746] <... futex resumed>) = 0 [pid 7747] open("./file0", O_RDONLY [pid 7746] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7747] <... open resumed>) = 4 [pid 7746] <... futex resumed>) = 0 [pid 7746] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7747] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7747] <... futex resumed>) = 0 [pid 7746] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7747] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7746] <... futex resumed>) = 0 [pid 7747] <... ioctl resumed>) = 0 [pid 7746] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7747] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7746] <... futex resumed>) = 0 [pid 7747] <... futex resumed>) = 1 [pid 7746] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7747] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7746] <... futex resumed>) = 0 [pid 7746] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7746] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7746] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[404]}, 88) = 404 [pid 7746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7765 attached [pid 7746] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7746] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7765] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7765] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7765] open("./file0", O_RDONLY) = 5 [pid 7765] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7746] <... futex resumed>) = 0 [pid 7765] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7746] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7746] <... futex resumed>) = 0 [pid 7765] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 232.327071][ T7747] BTRFS info (device loop0): balance: start -d -m [ 232.335717][ T7747] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 232.367064][ T7747] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7746] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7765] <... ioctl resumed>) = 0 [pid 7765] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 232.476390][ T7747] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7765] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7747] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7747] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7747] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7746] close(3) = 0 [pid 7746] close(4) = 0 [pid 7746] close(5) = 0 [pid 7746] close(6) = -1 EBADF (Bad file descriptor) [pid 7746] close(7) = -1 EBADF (Bad file descriptor) [pid 7746] close(8) = -1 EBADF (Bad file descriptor) [pid 7746] close(9) = -1 EBADF (Bad file descriptor) [pid 7746] close(10) = -1 EBADF (Bad file descriptor) [pid 7746] close(11) = -1 EBADF (Bad file descriptor) [pid 7746] close(12) = -1 EBADF (Bad file descriptor) [pid 7746] close(13) = -1 EBADF (Bad file descriptor) [pid 7746] close(14) = -1 EBADF (Bad file descriptor) [ 232.544941][ T7747] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 232.564278][ T7747] BTRFS info (device loop0): balance: ended with status: 0 [pid 7746] close(15) = -1 EBADF (Bad file descriptor) [pid 7746] close(16) = -1 EBADF (Bad file descriptor) [pid 7746] close(17) = -1 EBADF (Bad file descriptor) [pid 7746] close(18) = -1 EBADF (Bad file descriptor) [pid 7746] close(19) = -1 EBADF (Bad file descriptor) [pid 7746] close(20) = -1 EBADF (Bad file descriptor) [pid 7746] close(21) = -1 EBADF (Bad file descriptor) [pid 7746] close(22) = -1 EBADF (Bad file descriptor) [pid 7746] close(23) = -1 EBADF (Bad file descriptor) [pid 7746] close(24) = -1 EBADF (Bad file descriptor) [pid 7746] close(25) = -1 EBADF (Bad file descriptor) [pid 7746] close(26) = -1 EBADF (Bad file descriptor) [pid 7746] close(27) = -1 EBADF (Bad file descriptor) [pid 7746] close(28) = -1 EBADF (Bad file descriptor) [pid 7746] close(29) = -1 EBADF (Bad file descriptor) [pid 7746] exit_group(0 [pid 7765] <... futex resumed>) = ? [pid 7747] <... futex resumed>) = ? [pid 7746] <... exit_group resumed>) = ? [pid 7765] +++ exited with 0 +++ [pid 7747] +++ exited with 0 +++ [pid 7746] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=402, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./133/binderfs") = 0 [pid 5073] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./133/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./133") = 0 [pid 5073] mkdir("./134", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7766 attached , child_tidptr=0x5555570a9690) = 405 [pid 7766] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7766] chdir("./134") = 0 [pid 7766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7766] setpgid(0, 0) = 0 [pid 7766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7766] write(3, "1000", 4) = 4 [pid 7766] close(3) = 0 [pid 7766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7766] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7766] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7767 attached => {parent_tid=[406]}, 88) = 406 [pid 7767] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7766] rt_sigprocmask(SIG_SETMASK, [], [pid 7767] set_robust_list(0x7f8785c4c9a0, 24) = 0 [pid 7767] rt_sigprocmask(SIG_SETMASK, [], [pid 7766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7766] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7766] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7767] memfd_create("syzkaller", 0) = 3 [pid 7767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7767] munmap(0x7f877d82c000, 138412032) = 0 [pid 7767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7767] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7767] close(3) = 0 [pid 7767] mkdir("./file0", 0777) = 0 [ 233.181532][ T7767] loop0: detected capacity change from 0 to 32768 [ 233.194944][ T7767] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7767) [ 233.211768][ T7767] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.221488][ T7767] BTRFS info (device loop0): force clearing of disk cache [ 233.228775][ T7767] BTRFS info (device loop0): setting nodatasum [ 233.235154][ T7767] BTRFS info (device loop0): allowing degraded mounts [ 233.241940][ T7767] BTRFS info (device loop0): enabling disk space caching [ 233.249000][ T7767] BTRFS info (device loop0): disk space caching is enabled [ 233.270169][ T7767] BTRFS info (device loop0): enabling ssd optimizations [ 233.277194][ T7767] BTRFS info (device loop0): auto enabling async discard [ 233.285941][ T7767] BTRFS info (device loop0): rebuilding free space tree [ 233.298046][ T7767] BTRFS info (device loop0): disabling free space tree [ 233.305115][ T7767] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.314831][ T7767] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7767] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7767] chdir("./file0") = 0 [pid 7767] ioctl(4, LOOP_CLR_FD) = 0 [pid 7767] close(4) = 0 [pid 7767] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7767] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] <... futex resumed>) = 0 [pid 7766] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7767] <... futex resumed>) = 0 [pid 7766] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7767] open("./file0", O_RDONLY) = 4 [ 233.328032][ T7767] BTRFS info (device loop0): checking UUID tree [pid 7767] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] <... futex resumed>) = 0 [pid 7767] <... futex resumed>) = 1 [pid 7766] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7767] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7766] <... futex resumed>) = 0 [pid 7767] <... ioctl resumed>) = 0 [pid 7766] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7767] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7767] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] <... futex resumed>) = 0 [pid 7766] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7767] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7766] <... futex resumed>) = 0 [pid 7767] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 233.412554][ T7767] BTRFS info (device loop0): balance: start -d -m [ 233.422383][ T7767] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7766] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7766] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7766] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[407]}, 88) = 407 [pid 7766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7766] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7766] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7785 attached [pid 7785] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7785] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7785] open("./file0", O_RDONLY) = 5 [pid 7785] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7766] <... futex resumed>) = 0 [pid 7785] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7766] <... futex resumed>) = 0 [pid 7785] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 233.453273][ T7767] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7766] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7785] <... ioctl resumed>) = 0 [pid 7785] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7785] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7767] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7767] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7767] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] close(3) = 0 [pid 7766] close(4) = 0 [pid 7766] close(5) = 0 [ 233.610305][ T7767] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 233.634372][ T7767] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 233.652832][ T7767] BTRFS info (device loop0): balance: ended with status: 0 [pid 7766] close(6) = -1 EBADF (Bad file descriptor) [pid 7766] close(7) = -1 EBADF (Bad file descriptor) [pid 7766] close(8) = -1 EBADF (Bad file descriptor) [pid 7766] close(9) = -1 EBADF (Bad file descriptor) [pid 7766] close(10) = -1 EBADF (Bad file descriptor) [pid 7766] close(11) = -1 EBADF (Bad file descriptor) [pid 7766] close(12) = -1 EBADF (Bad file descriptor) [pid 7766] close(13) = -1 EBADF (Bad file descriptor) [pid 7766] close(14) = -1 EBADF (Bad file descriptor) [pid 7766] close(15) = -1 EBADF (Bad file descriptor) [pid 7766] close(16) = -1 EBADF (Bad file descriptor) [pid 7766] close(17) = -1 EBADF (Bad file descriptor) [pid 7766] close(18) = -1 EBADF (Bad file descriptor) [pid 7766] close(19) = -1 EBADF (Bad file descriptor) [pid 7766] close(20) = -1 EBADF (Bad file descriptor) [pid 7766] close(21) = -1 EBADF (Bad file descriptor) [pid 7766] close(22) = -1 EBADF (Bad file descriptor) [pid 7766] close(23) = -1 EBADF (Bad file descriptor) [pid 7766] close(24) = -1 EBADF (Bad file descriptor) [pid 7766] close(25) = -1 EBADF (Bad file descriptor) [pid 7766] close(26) = -1 EBADF (Bad file descriptor) [pid 7766] close(27) = -1 EBADF (Bad file descriptor) [pid 7766] close(28) = -1 EBADF (Bad file descriptor) [pid 7766] close(29) = -1 EBADF (Bad file descriptor) [pid 7766] exit_group(0 [pid 7785] <... futex resumed>) = ? [pid 7785] +++ exited with 0 +++ [pid 7767] <... futex resumed>) = ? [pid 7766] <... exit_group resumed>) = ? [pid 7767] +++ exited with 0 +++ [pid 7766] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=405, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=46 /* 0.46 s */} --- [pid 5073] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./134/binderfs") = 0 [pid 5073] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./134/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./134") = 0 [pid 5073] mkdir("./135", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7788 attached , child_tidptr=0x5555570a9690) = 408 [pid 7788] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7788] chdir("./135") = 0 [pid 7788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7788] setpgid(0, 0) = 0 [pid 7788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7788] write(3, "1000", 4) = 4 [pid 7788] close(3) = 0 [pid 7788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7788] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7788] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7789 attached [pid 7789] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7788] <... clone3 resumed> => {parent_tid=[409]}, 88) = 409 [pid 7789] set_robust_list(0x7f8785c4c9a0, 24 [pid 7788] rt_sigprocmask(SIG_SETMASK, [], [pid 7789] <... set_robust_list resumed>) = 0 [pid 7788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7789] rt_sigprocmask(SIG_SETMASK, [], [pid 7788] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7789] memfd_create("syzkaller", 0 [pid 7788] <... futex resumed>) = 0 [pid 7788] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7789] <... memfd_create resumed>) = 3 [pid 7789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7789] munmap(0x7f877d82c000, 138412032) = 0 [pid 7789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7789] close(3) = 0 [pid 7789] mkdir("./file0", 0777) = 0 [ 234.214074][ T7789] loop0: detected capacity change from 0 to 32768 [ 234.224056][ T7789] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7789) [ 234.240089][ T7789] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 234.249444][ T7789] BTRFS info (device loop0): force clearing of disk cache [ 234.256665][ T7789] BTRFS info (device loop0): setting nodatasum [ 234.262830][ T7789] BTRFS info (device loop0): allowing degraded mounts [ 234.269980][ T7789] BTRFS info (device loop0): enabling disk space caching [ 234.277070][ T7789] BTRFS info (device loop0): disk space caching is enabled [ 234.298379][ T7789] BTRFS info (device loop0): enabling ssd optimizations [ 234.305342][ T7789] BTRFS info (device loop0): auto enabling async discard [pid 7789] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7789] chdir("./file0") = 0 [pid 7789] ioctl(4, LOOP_CLR_FD) = 0 [pid 7789] close(4) = 0 [pid 7789] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7789] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] <... futex resumed>) = 0 [pid 7788] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7788] <... futex resumed>) = 0 [pid 7789] open("./file0", O_RDONLY [pid 7788] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7789] <... open resumed>) = 4 [pid 7789] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] <... futex resumed>) = 0 [pid 7788] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] <... futex resumed>) = 1 [pid 7788] <... futex resumed>) = 0 [pid 7789] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [ 234.313244][ T7789] BTRFS info (device loop0): rebuilding free space tree [ 234.325194][ T7789] BTRFS info (device loop0): disabling free space tree [ 234.332080][ T7789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.341751][ T7789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.355258][ T7789] BTRFS info (device loop0): checking UUID tree [pid 7788] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7789] <... ioctl resumed>) = 0 [pid 7789] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7789] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] <... futex resumed>) = 0 [pid 7788] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] <... futex resumed>) = 0 [pid 7788] <... futex resumed>) = 1 [pid 7789] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 234.410781][ T7789] BTRFS info (device loop0): balance: start -d -m [ 234.422426][ T7789] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7788] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7788] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7788] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[410]}, 88) = 410 [pid 7788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7807 attached [pid 7788] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7788] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7807] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7807] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7807] open("./file0", O_RDONLY) = 5 [pid 7807] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7788] <... futex resumed>) = 0 [pid 7807] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7788] <... futex resumed>) = 0 [pid 7807] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 234.452869][ T7789] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7788] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7788] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7807] <... ioctl resumed>) = 0 [pid 7807] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 234.604411][ T7789] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 234.629152][ T7789] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7807] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7789] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7789] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] close(3) = 0 [pid 7789] <... futex resumed>) = 0 [pid 7788] close(4 [pid 7789] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] <... close resumed>) = 0 [pid 7788] close(5) = 0 [pid 7788] close(6) = -1 EBADF (Bad file descriptor) [pid 7788] close(7) = -1 EBADF (Bad file descriptor) [pid 7788] close(8) = -1 EBADF (Bad file descriptor) [pid 7788] close(9) = -1 EBADF (Bad file descriptor) [pid 7788] close(10) = -1 EBADF (Bad file descriptor) [pid 7788] close(11) = -1 EBADF (Bad file descriptor) [pid 7788] close(12) = -1 EBADF (Bad file descriptor) [pid 7788] close(13) = -1 EBADF (Bad file descriptor) [pid 7788] close(14) = -1 EBADF (Bad file descriptor) [pid 7788] close(15) = -1 EBADF (Bad file descriptor) [pid 7788] close(16) = -1 EBADF (Bad file descriptor) [pid 7788] close(17) = -1 EBADF (Bad file descriptor) [pid 7788] close(18) = -1 EBADF (Bad file descriptor) [pid 7788] close(19) = -1 EBADF (Bad file descriptor) [pid 7788] close(20) = -1 EBADF (Bad file descriptor) [pid 7788] close(21) = -1 EBADF (Bad file descriptor) [pid 7788] close(22) = -1 EBADF (Bad file descriptor) [pid 7788] close(23) = -1 EBADF (Bad file descriptor) [pid 7788] close(24) = -1 EBADF (Bad file descriptor) [pid 7788] close(25) = -1 EBADF (Bad file descriptor) [pid 7788] close(26) = -1 EBADF (Bad file descriptor) [pid 7788] close(27) = -1 EBADF (Bad file descriptor) [pid 7788] close(28) = -1 EBADF (Bad file descriptor) [pid 7788] close(29) = -1 EBADF (Bad file descriptor) [pid 7788] exit_group(0 [pid 7807] <... futex resumed>) = ? [pid 7789] <... futex resumed>) = ? [pid 7788] <... exit_group resumed>) = ? [pid 7807] +++ exited with 0 +++ [pid 7789] +++ exited with 0 +++ [pid 7788] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=408, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./135/binderfs") = 0 [ 234.648430][ T7789] BTRFS info (device loop0): balance: ended with status: 0 [pid 5073] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./135/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./135") = 0 [pid 5073] mkdir("./136", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7808 attached , child_tidptr=0x5555570a9690) = 411 [pid 7808] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7808] chdir("./136") = 0 [pid 7808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7808] setpgid(0, 0) = 0 [pid 7808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7808] write(3, "1000", 4) = 4 [pid 7808] close(3) = 0 [pid 7808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7808] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7808] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7809 attached => {parent_tid=[412]}, 88) = 412 [pid 7809] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7809] set_robust_list(0x7f8785c4c9a0, 24 [pid 7808] rt_sigprocmask(SIG_SETMASK, [], [pid 7809] <... set_robust_list resumed>) = 0 [pid 7808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7809] rt_sigprocmask(SIG_SETMASK, [], [pid 7808] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7808] <... futex resumed>) = 0 [pid 7809] memfd_create("syzkaller", 0 [pid 7808] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7809] <... memfd_create resumed>) = 3 [pid 7809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7809] munmap(0x7f877d82c000, 138412032) = 0 [pid 7809] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7809] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7809] close(3) = 0 [pid 7809] mkdir("./file0", 0777) = 0 [ 235.103112][ T7809] loop0: detected capacity change from 0 to 32768 [ 235.127609][ T7809] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7809) [ 235.144626][ T7809] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.153911][ T7809] BTRFS info (device loop0): force clearing of disk cache [ 235.161028][ T7809] BTRFS info (device loop0): setting nodatasum [ 235.167344][ T7809] BTRFS info (device loop0): allowing degraded mounts [ 235.174217][ T7809] BTRFS info (device loop0): enabling disk space caching [ 235.181257][ T7809] BTRFS info (device loop0): disk space caching is enabled [ 235.204578][ T7809] BTRFS info (device loop0): enabling ssd optimizations [ 235.211532][ T7809] BTRFS info (device loop0): auto enabling async discard [ 235.219741][ T7809] BTRFS info (device loop0): rebuilding free space tree [ 235.231741][ T7809] BTRFS info (device loop0): disabling free space tree [ 235.238771][ T7809] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7809] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7809] chdir("./file0") = 0 [pid 7809] ioctl(4, LOOP_CLR_FD) = 0 [pid 7809] close(4) = 0 [pid 7809] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 235.248436][ T7809] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.261681][ T7809] BTRFS info (device loop0): checking UUID tree [pid 7809] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7808] <... futex resumed>) = 0 [pid 7808] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7809] <... futex resumed>) = 0 [pid 7808] <... futex resumed>) = 1 [pid 7809] open("./file0", O_RDONLY) = 4 [pid 7809] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7808] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7809] <... futex resumed>) = 0 [pid 7809] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7808] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7809] <... futex resumed>) = 0 [pid 7808] <... futex resumed>) = 1 [pid 7809] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7808] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7809] <... ioctl resumed>) = 0 [pid 7809] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7808] <... futex resumed>) = 0 [pid 7809] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7808] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7809] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7808] <... futex resumed>) = 0 [ 235.360075][ T7809] BTRFS info (device loop0): balance: start -d -m [ 235.371342][ T7809] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7808] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7808] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7808] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7827 attached [pid 7827] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7808] <... clone3 resumed> => {parent_tid=[413]}, 88) = 413 [pid 7808] rt_sigprocmask(SIG_SETMASK, [], [pid 7827] <... rseq resumed>) = 0 [pid 7808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7808] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7827] set_robust_list(0x7f8785c2b9a0, 24 [pid 7808] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7827] <... set_robust_list resumed>) = 0 [pid 7827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7827] open("./file0", O_RDONLY) = 5 [pid 7827] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7808] <... futex resumed>) = 0 [pid 7808] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7808] <... futex resumed>) = 0 [ 235.400903][ T7809] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7808] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 235.494230][ T7809] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7827] <... ioctl resumed>) = 0 [pid 7827] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7827] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7809] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7809] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7808] close(3 [pid 7809] <... futex resumed>) = 0 [pid 7808] <... close resumed>) = 0 [pid 7809] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7808] close(4) = 0 [pid 7808] close(5) = 0 [pid 7808] close(6) = -1 EBADF (Bad file descriptor) [pid 7808] close(7) = -1 EBADF (Bad file descriptor) [pid 7808] close(8) = -1 EBADF (Bad file descriptor) [pid 7808] close(9) = -1 EBADF (Bad file descriptor) [pid 7808] close(10) = -1 EBADF (Bad file descriptor) [pid 7808] close(11) = -1 EBADF (Bad file descriptor) [pid 7808] close(12) = -1 EBADF (Bad file descriptor) [pid 7808] close(13) = -1 EBADF (Bad file descriptor) [pid 7808] close(14) = -1 EBADF (Bad file descriptor) [ 235.563213][ T7809] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 235.582366][ T7809] BTRFS info (device loop0): balance: ended with status: 0 [pid 7808] close(15) = -1 EBADF (Bad file descriptor) [pid 7808] close(16) = -1 EBADF (Bad file descriptor) [pid 7808] close(17) = -1 EBADF (Bad file descriptor) [pid 7808] close(18) = -1 EBADF (Bad file descriptor) [pid 7808] close(19) = -1 EBADF (Bad file descriptor) [pid 7808] close(20) = -1 EBADF (Bad file descriptor) [pid 7808] close(21) = -1 EBADF (Bad file descriptor) [pid 7808] close(22) = -1 EBADF (Bad file descriptor) [pid 7808] close(23) = -1 EBADF (Bad file descriptor) [pid 7808] close(24) = -1 EBADF (Bad file descriptor) [pid 7808] close(25) = -1 EBADF (Bad file descriptor) [pid 7808] close(26) = -1 EBADF (Bad file descriptor) [pid 7808] close(27) = -1 EBADF (Bad file descriptor) [pid 7808] close(28) = -1 EBADF (Bad file descriptor) [pid 7808] close(29) = -1 EBADF (Bad file descriptor) [pid 7808] exit_group(0) = ? [pid 7827] <... futex resumed>) = ? [pid 7809] <... futex resumed>) = ? [pid 7827] +++ exited with 0 +++ [pid 7809] +++ exited with 0 +++ [pid 7808] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=411, si_uid=0, si_status=0, si_utime=0, si_stime=49 /* 0.49 s */} --- [pid 5073] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./136/binderfs") = 0 [pid 5073] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./136/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./136") = 0 [pid 5073] mkdir("./137", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570a9690) = 414 ./strace-static-x86_64: Process 7831 attached [pid 7831] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7831] chdir("./137") = 0 [pid 7831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7831] setpgid(0, 0) = 0 [pid 7831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7831] write(3, "1000", 4) = 4 [pid 7831] close(3) = 0 [pid 7831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7831] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7831] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7832 attached [pid 7832] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7832] set_robust_list(0x7f8785c4c9a0, 24 [pid 7831] <... clone3 resumed> => {parent_tid=[415]}, 88) = 415 [pid 7832] <... set_robust_list resumed>) = 0 [pid 7831] rt_sigprocmask(SIG_SETMASK, [], [pid 7832] rt_sigprocmask(SIG_SETMASK, [], [pid 7831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7831] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7832] memfd_create("syzkaller", 0 [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7832] <... memfd_create resumed>) = 3 [pid 7832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7832] munmap(0x7f877d82c000, 138412032) = 0 [pid 7832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7832] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7832] close(3) = 0 [pid 7832] mkdir("./file0", 0777) = 0 [ 236.208731][ T7832] loop0: detected capacity change from 0 to 32768 [ 236.233445][ T7832] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7832) [ 236.249145][ T7832] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 236.258440][ T7832] BTRFS info (device loop0): force clearing of disk cache [ 236.265636][ T7832] BTRFS info (device loop0): setting nodatasum [ 236.271781][ T7832] BTRFS info (device loop0): allowing degraded mounts [ 236.278585][ T7832] BTRFS info (device loop0): enabling disk space caching [ 236.285635][ T7832] BTRFS info (device loop0): disk space caching is enabled [ 236.307117][ T7832] BTRFS info (device loop0): enabling ssd optimizations [ 236.314105][ T7832] BTRFS info (device loop0): auto enabling async discard [ 236.321967][ T7832] BTRFS info (device loop0): rebuilding free space tree [ 236.334601][ T7832] BTRFS info (device loop0): disabling free space tree [ 236.341485][ T7832] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7832] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7832] chdir("./file0") = 0 [pid 7832] ioctl(4, LOOP_CLR_FD) = 0 [pid 7832] close(4) = 0 [pid 7832] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7832] open("./file0", O_RDONLY [pid 7831] <... futex resumed>) = 0 [pid 7832] <... open resumed>) = 4 [ 236.351173][ T7832] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 236.364738][ T7832] BTRFS info (device loop0): checking UUID tree [pid 7831] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7832] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7831] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7832] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 7832] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7831] <... futex resumed>) = 0 [pid 7832] <... futex resumed>) = 1 [pid 7831] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7832] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 236.450234][ T7832] BTRFS info (device loop0): balance: start -d -m [ 236.462519][ T7832] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7831] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7831] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7831] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7850 attached [pid 7850] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7831] <... clone3 resumed> => {parent_tid=[416]}, 88) = 416 [pid 7850] set_robust_list(0x7f8785c2b9a0, 24 [pid 7831] rt_sigprocmask(SIG_SETMASK, [], [pid 7850] <... set_robust_list resumed>) = 0 [pid 7850] rt_sigprocmask(SIG_SETMASK, [], [pid 7831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7850] open("./file0", O_RDONLY [pid 7831] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7850] <... open resumed>) = 5 [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7850] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7831] <... futex resumed>) = 0 [pid 7850] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7831] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 236.497663][ T7832] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7831] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7850] <... ioctl resumed>) = 0 [pid 7850] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7850] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7832] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 7832] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7832] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] close(3) = 0 [pid 7831] close(4) = 0 [pid 7831] close(5) = 0 [pid 7831] close(6) = -1 EBADF (Bad file descriptor) [pid 7831] close(7) = -1 EBADF (Bad file descriptor) [pid 7831] close(8) = -1 EBADF (Bad file descriptor) [pid 7831] close(9) = -1 EBADF (Bad file descriptor) [pid 7831] close(10) = -1 EBADF (Bad file descriptor) [ 236.631344][ T7832] BTRFS info (device loop0): 1 enospc errors during balance [ 236.638697][ T7832] BTRFS info (device loop0): balance: ended with status: -28 [pid 7831] close(11) = -1 EBADF (Bad file descriptor) [pid 7831] close(12) = -1 EBADF (Bad file descriptor) [pid 7831] close(13) = -1 EBADF (Bad file descriptor) [pid 7831] close(14) = -1 EBADF (Bad file descriptor) [pid 7831] close(15) = -1 EBADF (Bad file descriptor) [pid 7831] close(16) = -1 EBADF (Bad file descriptor) [pid 7831] close(17) = -1 EBADF (Bad file descriptor) [pid 7831] close(18) = -1 EBADF (Bad file descriptor) [pid 7831] close(19) = -1 EBADF (Bad file descriptor) [pid 7831] close(20) = -1 EBADF (Bad file descriptor) [pid 7831] close(21) = -1 EBADF (Bad file descriptor) [pid 7831] close(22) = -1 EBADF (Bad file descriptor) [pid 7831] close(23) = -1 EBADF (Bad file descriptor) [pid 7831] close(24) = -1 EBADF (Bad file descriptor) [pid 7831] close(25) = -1 EBADF (Bad file descriptor) [pid 7831] close(26) = -1 EBADF (Bad file descriptor) [pid 7831] close(27) = -1 EBADF (Bad file descriptor) [pid 7831] close(28) = -1 EBADF (Bad file descriptor) [pid 7831] close(29) = -1 EBADF (Bad file descriptor) [pid 7831] exit_group(0 [pid 7850] <... futex resumed>) = ? [pid 7832] <... futex resumed>) = ? [pid 7850] +++ exited with 0 +++ [pid 7831] <... exit_group resumed>) = ? [pid 7832] +++ exited with 0 +++ [pid 7831] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=414, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=37 /* 0.37 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./137/binderfs") = 0 [pid 5073] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./137/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./137") = 0 [pid 5073] mkdir("./138", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7851 attached , child_tidptr=0x5555570a9690) = 417 [pid 7851] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7851] chdir("./138") = 0 [pid 7851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7851] setpgid(0, 0) = 0 [pid 7851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7851] write(3, "1000", 4) = 4 [pid 7851] close(3) = 0 [pid 7851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7851] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7851] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7852 attached [pid 7852] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7851] <... clone3 resumed> => {parent_tid=[418]}, 88) = 418 [pid 7852] <... rseq resumed>) = 0 [pid 7851] rt_sigprocmask(SIG_SETMASK, [], [pid 7852] set_robust_list(0x7f8785c4c9a0, 24 [pid 7851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7852] <... set_robust_list resumed>) = 0 [pid 7851] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] rt_sigprocmask(SIG_SETMASK, [], [pid 7851] <... futex resumed>) = 0 [pid 7852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7851] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7852] memfd_create("syzkaller", 0) = 3 [pid 7852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7852] munmap(0x7f877d82c000, 138412032) = 0 [pid 7852] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7852] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7852] close(3) = 0 [pid 7852] mkdir("./file0", 0777) = 0 [ 237.230235][ T7852] loop0: detected capacity change from 0 to 32768 [ 237.254414][ T7852] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7852) [ 237.270425][ T7852] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 237.279710][ T7852] BTRFS info (device loop0): force clearing of disk cache [ 237.286846][ T7852] BTRFS info (device loop0): setting nodatasum [ 237.292990][ T7852] BTRFS info (device loop0): allowing degraded mounts [ 237.299816][ T7852] BTRFS info (device loop0): enabling disk space caching [ 237.306888][ T7852] BTRFS info (device loop0): disk space caching is enabled [ 237.328457][ T7852] BTRFS info (device loop0): enabling ssd optimizations [ 237.335521][ T7852] BTRFS info (device loop0): auto enabling async discard [ 237.343623][ T7852] BTRFS info (device loop0): rebuilding free space tree [ 237.357112][ T7852] BTRFS info (device loop0): disabling free space tree [ 237.364248][ T7852] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7852] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7852] chdir("./file0") = 0 [pid 7852] ioctl(4, LOOP_CLR_FD) = 0 [pid 7852] close(4) = 0 [pid 7852] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7851] <... futex resumed>) = 0 [pid 7852] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7851] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7852] open("./file0", O_RDONLY) = 4 [ 237.373972][ T7852] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.386875][ T7852] BTRFS info (device loop0): checking UUID tree [pid 7852] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7851] <... futex resumed>) = 0 [pid 7851] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7851] <... futex resumed>) = 0 [pid 7852] <... ioctl resumed>) = 0 [pid 7851] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7852] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7852] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7851] <... futex resumed>) = 0 [pid 7851] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... futex resumed>) = 0 [pid 7851] <... futex resumed>) = 1 [pid 7852] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7851] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7851] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7851] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[419]}, 88) = 419 [pid 7851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7851] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7870 attached ) = 0 [pid 7851] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7870] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7870] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7870] open("./file0", O_RDONLY) = 5 [pid 7870] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7870] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7851] <... futex resumed>) = 0 [ 237.464625][ T7852] BTRFS info (device loop0): balance: start -d -m [ 237.475124][ T7852] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 237.498724][ T7852] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7851] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7870] <... futex resumed>) = 0 [pid 7870] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7851] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 237.585219][ T7852] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 7870] <... ioctl resumed>) = 0 [pid 7870] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7852] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7852] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7852] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7851] close(3) = 0 [pid 7851] close(4) = 0 [pid 7851] close(5) = 0 [pid 7851] close(6) = -1 EBADF (Bad file descriptor) [pid 7851] close(7) = -1 EBADF (Bad file descriptor) [pid 7851] close(8) = -1 EBADF (Bad file descriptor) [pid 7851] close(9) = -1 EBADF (Bad file descriptor) [pid 7851] close(10) = -1 EBADF (Bad file descriptor) [pid 7851] close(11) = -1 EBADF (Bad file descriptor) [ 237.682805][ T7852] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 237.702832][ T7852] BTRFS info (device loop0): balance: ended with status: 0 [pid 7851] close(12) = -1 EBADF (Bad file descriptor) [pid 7851] close(13) = -1 EBADF (Bad file descriptor) [pid 7851] close(14) = -1 EBADF (Bad file descriptor) [pid 7851] close(15) = -1 EBADF (Bad file descriptor) [pid 7851] close(16) = -1 EBADF (Bad file descriptor) [pid 7851] close(17) = -1 EBADF (Bad file descriptor) [pid 7851] close(18) = -1 EBADF (Bad file descriptor) [pid 7851] close(19) = -1 EBADF (Bad file descriptor) [pid 7851] close(20) = -1 EBADF (Bad file descriptor) [pid 7851] close(21) = -1 EBADF (Bad file descriptor) [pid 7851] close(22) = -1 EBADF (Bad file descriptor) [pid 7851] close(23) = -1 EBADF (Bad file descriptor) [pid 7851] close(24) = -1 EBADF (Bad file descriptor) [pid 7851] close(25) = -1 EBADF (Bad file descriptor) [pid 7851] close(26) = -1 EBADF (Bad file descriptor) [pid 7851] close(27) = -1 EBADF (Bad file descriptor) [pid 7851] close(28) = -1 EBADF (Bad file descriptor) [pid 7851] close(29) = -1 EBADF (Bad file descriptor) [pid 7851] exit_group(0) = ? [pid 7870] <... futex resumed>) = ? [pid 7852] <... futex resumed>) = ? [pid 7870] +++ exited with 0 +++ [pid 7852] +++ exited with 0 +++ [pid 7851] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=417, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} --- [pid 5073] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./138/binderfs") = 0 [pid 5073] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./138/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./138") = 0 [pid 5073] mkdir("./139", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7871 attached , child_tidptr=0x5555570a9690) = 420 [pid 7871] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7871] chdir("./139") = 0 [pid 7871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7871] setpgid(0, 0) = 0 [pid 7871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7871] write(3, "1000", 4) = 4 [pid 7871] close(3) = 0 [pid 7871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7871] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7871] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7872 attached => {parent_tid=[421]}, 88) = 421 [pid 7872] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7871] rt_sigprocmask(SIG_SETMASK, [], [pid 7872] set_robust_list(0x7f8785c4c9a0, 24 [pid 7871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7872] <... set_robust_list resumed>) = 0 [pid 7871] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7872] rt_sigprocmask(SIG_SETMASK, [], [pid 7871] <... futex resumed>) = 0 [pid 7872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7871] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7872] memfd_create("syzkaller", 0) = 3 [pid 7872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7872] munmap(0x7f877d82c000, 138412032) = 0 [pid 7872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7872] close(3) = 0 [pid 7872] mkdir("./file0", 0777) = 0 [ 238.337898][ T7872] loop0: detected capacity change from 0 to 32768 [ 238.362350][ T7872] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7872) [ 238.379307][ T7872] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 238.388592][ T7872] BTRFS info (device loop0): force clearing of disk cache [ 238.395745][ T7872] BTRFS info (device loop0): setting nodatasum [ 238.401890][ T7872] BTRFS info (device loop0): allowing degraded mounts [ 238.408733][ T7872] BTRFS info (device loop0): enabling disk space caching [ 238.415804][ T7872] BTRFS info (device loop0): disk space caching is enabled [ 238.437423][ T7872] BTRFS info (device loop0): enabling ssd optimizations [ 238.444397][ T7872] BTRFS info (device loop0): auto enabling async discard [ 238.452735][ T7872] BTRFS info (device loop0): rebuilding free space tree [ 238.465104][ T7872] BTRFS info (device loop0): disabling free space tree [ 238.471995][ T7872] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 7872] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7872] chdir("./file0") = 0 [pid 7872] ioctl(4, LOOP_CLR_FD) = 0 [pid 7872] close(4) = 0 [pid 7872] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7872] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7871] <... futex resumed>) = 0 [pid 7871] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7872] <... futex resumed>) = 0 [pid 7871] <... futex resumed>) = 1 [pid 7871] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 238.481670][ T7872] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.494971][ T7872] BTRFS info (device loop0): checking UUID tree [pid 7872] open("./file0", O_RDONLY) = 4 [pid 7872] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7871] <... futex resumed>) = 0 [pid 7871] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7872] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7871] <... futex resumed>) = 0 [pid 7872] <... ioctl resumed>) = 0 [pid 7871] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7872] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7871] <... futex resumed>) = 0 [pid 7872] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7871] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7871] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7871] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7871] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7890 attached [pid 7890] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7871] <... clone3 resumed> => {parent_tid=[422]}, 88) = 422 [pid 7890] <... rseq resumed>) = 0 [pid 7871] rt_sigprocmask(SIG_SETMASK, [], [pid 7890] set_robust_list(0x7f8785c2b9a0, 24 [pid 7871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7890] <... set_robust_list resumed>) = 0 [pid 7871] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7890] rt_sigprocmask(SIG_SETMASK, [], [pid 7871] <... futex resumed>) = 0 [pid 7890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7871] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7890] open("./file0", O_RDONLY) = 5 [pid 7890] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7871] <... futex resumed>) = 0 [pid 7890] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7871] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7871] <... futex resumed>) = 0 [pid 7890] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 238.569350][ T7872] BTRFS info (device loop0): balance: start -d -m [ 238.579420][ T7872] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 238.608120][ T7872] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7871] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7890] <... ioctl resumed>) = 0 [pid 7890] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7890] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7872] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 7872] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] close(3 [pid 7872] <... futex resumed>) = 0 [pid 7871] <... close resumed>) = 0 [pid 7872] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7871] close(4) = 0 [pid 7871] close(5) = 0 [pid 7871] close(6) = -1 EBADF (Bad file descriptor) [pid 7871] close(7) = -1 EBADF (Bad file descriptor) [pid 7871] close(8) = -1 EBADF (Bad file descriptor) [pid 7871] close(9) = -1 EBADF (Bad file descriptor) [pid 7871] close(10) = -1 EBADF (Bad file descriptor) [ 238.773100][ T7872] BTRFS info (device loop0): 1 enospc errors during balance [ 238.780443][ T7872] BTRFS info (device loop0): balance: ended with status: -28 [pid 7871] close(11) = -1 EBADF (Bad file descriptor) [pid 7871] close(12) = -1 EBADF (Bad file descriptor) [pid 7871] close(13) = -1 EBADF (Bad file descriptor) [pid 7871] close(14) = -1 EBADF (Bad file descriptor) [pid 7871] close(15) = -1 EBADF (Bad file descriptor) [pid 7871] close(16) = -1 EBADF (Bad file descriptor) [pid 7871] close(17) = -1 EBADF (Bad file descriptor) [pid 7871] close(18) = -1 EBADF (Bad file descriptor) [pid 7871] close(19) = -1 EBADF (Bad file descriptor) [pid 7871] close(20) = -1 EBADF (Bad file descriptor) [pid 7871] close(21) = -1 EBADF (Bad file descriptor) [pid 7871] close(22) = -1 EBADF (Bad file descriptor) [pid 7871] close(23) = -1 EBADF (Bad file descriptor) [pid 7871] close(24) = -1 EBADF (Bad file descriptor) [pid 7871] close(25) = -1 EBADF (Bad file descriptor) [pid 7871] close(26) = -1 EBADF (Bad file descriptor) [pid 7871] close(27) = -1 EBADF (Bad file descriptor) [pid 7871] close(28) = -1 EBADF (Bad file descriptor) [pid 7871] close(29) = -1 EBADF (Bad file descriptor) [pid 7871] exit_group(0 [pid 7890] <... futex resumed>) = ? [pid 7872] <... futex resumed>) = ? [pid 7890] +++ exited with 0 +++ [pid 7872] +++ exited with 0 +++ [pid 7871] <... exit_group resumed>) = ? [pid 7871] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=420, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5073] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./139/binderfs") = 0 [pid 5073] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./139/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./139") = 0 [pid 5073] mkdir("./140", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7891 attached [pid 7891] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 423 [pid 7891] <... set_robust_list resumed>) = 0 [pid 7891] chdir("./140") = 0 [pid 7891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7891] setpgid(0, 0) = 0 [pid 7891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7891] write(3, "1000", 4) = 4 [pid 7891] close(3) = 0 [pid 7891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7891] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7891] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7891] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7892 attached [pid 7892] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7891] <... clone3 resumed> => {parent_tid=[424]}, 88) = 424 [pid 7892] <... rseq resumed>) = 0 [pid 7891] rt_sigprocmask(SIG_SETMASK, [], [pid 7892] set_robust_list(0x7f8785c4c9a0, 24 [pid 7891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7892] <... set_robust_list resumed>) = 0 [pid 7891] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7892] rt_sigprocmask(SIG_SETMASK, [], [pid 7891] <... futex resumed>) = 0 [pid 7892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7891] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7892] memfd_create("syzkaller", 0) = 3 [pid 7892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7892] munmap(0x7f877d82c000, 138412032) = 0 [pid 7892] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7892] close(3) = 0 [pid 7892] mkdir("./file0", 0777) = 0 [ 239.368838][ T7892] loop0: detected capacity change from 0 to 32768 [ 239.382985][ T7892] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7892) [ 239.399626][ T7892] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.409021][ T7892] BTRFS info (device loop0): force clearing of disk cache [ 239.416169][ T7892] BTRFS info (device loop0): setting nodatasum [ 239.422348][ T7892] BTRFS info (device loop0): allowing degraded mounts [ 239.429151][ T7892] BTRFS info (device loop0): enabling disk space caching [ 239.436199][ T7892] BTRFS info (device loop0): disk space caching is enabled [ 239.458699][ T7892] BTRFS info (device loop0): enabling ssd optimizations [ 239.465857][ T7892] BTRFS info (device loop0): auto enabling async discard [ 239.473792][ T7892] BTRFS info (device loop0): rebuilding free space tree [ 239.485697][ T7892] BTRFS info (device loop0): disabling free space tree [ 239.492592][ T7892] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 239.502297][ T7892] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7892] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7892] chdir("./file0") = 0 [pid 7892] ioctl(4, LOOP_CLR_FD) = 0 [pid 7892] close(4) = 0 [pid 7892] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7891] <... futex resumed>) = 0 [pid 7891] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7892] open("./file0", O_RDONLY [pid 7891] <... futex resumed>) = 0 [pid 7892] <... open resumed>) = 4 [ 239.515383][ T7892] BTRFS info (device loop0): checking UUID tree [pid 7891] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7892] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7891] <... futex resumed>) = 0 [pid 7891] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7892] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7891] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7892] <... ioctl resumed>) = 0 [pid 7892] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7891] <... futex resumed>) = 0 [pid 7891] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7892] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7891] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7891] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7891] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7891] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[425]}, 88) = 425 [pid 7891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7891] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7910 attached [pid 7891] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7910] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7910] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7910] open("./file0", O_RDONLY) = 5 [pid 7910] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7891] <... futex resumed>) = 0 [ 239.591646][ T7892] BTRFS info (device loop0): balance: start -d -m [ 239.601403][ T7892] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 239.631718][ T7892] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7910] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7910] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7891] <... futex resumed>) = 0 [pid 7891] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7910] <... ioctl resumed>) = 0 [pid 7910] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 239.790288][ T7892] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 239.815482][ T7892] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7910] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7892] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7892] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7892] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] close(3) = 0 [pid 7891] close(4) = 0 [pid 7891] close(5) = 0 [pid 7891] close(6) = -1 EBADF (Bad file descriptor) [pid 7891] close(7) = -1 EBADF (Bad file descriptor) [ 239.835598][ T7892] BTRFS info (device loop0): balance: ended with status: 0 [pid 7891] close(8) = -1 EBADF (Bad file descriptor) [pid 7891] close(9) = -1 EBADF (Bad file descriptor) [pid 7891] close(10) = -1 EBADF (Bad file descriptor) [pid 7891] close(11) = -1 EBADF (Bad file descriptor) [pid 7891] close(12) = -1 EBADF (Bad file descriptor) [pid 7891] close(13) = -1 EBADF (Bad file descriptor) [pid 7891] close(14) = -1 EBADF (Bad file descriptor) [pid 7891] close(15) = -1 EBADF (Bad file descriptor) [pid 7891] close(16) = -1 EBADF (Bad file descriptor) [pid 7891] close(17) = -1 EBADF (Bad file descriptor) [pid 7891] close(18) = -1 EBADF (Bad file descriptor) [pid 7891] close(19) = -1 EBADF (Bad file descriptor) [pid 7891] close(20) = -1 EBADF (Bad file descriptor) [pid 7891] close(21) = -1 EBADF (Bad file descriptor) [pid 7891] close(22) = -1 EBADF (Bad file descriptor) [pid 7891] close(23) = -1 EBADF (Bad file descriptor) [pid 7891] close(24) = -1 EBADF (Bad file descriptor) [pid 7891] close(25) = -1 EBADF (Bad file descriptor) [pid 7891] close(26) = -1 EBADF (Bad file descriptor) [pid 7891] close(27) = -1 EBADF (Bad file descriptor) [pid 7891] close(28) = -1 EBADF (Bad file descriptor) [pid 7891] close(29) = -1 EBADF (Bad file descriptor) [pid 7891] exit_group(0 [pid 7910] <... futex resumed>) = ? [pid 7910] +++ exited with 0 +++ [pid 7892] <... futex resumed>) = ? [pid 7891] <... exit_group resumed>) = ? [pid 7892] +++ exited with 0 +++ [pid 7891] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=423, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./140/binderfs") = 0 [pid 5073] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./140/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./140") = 0 [pid 5073] mkdir("./141", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7911 attached , child_tidptr=0x5555570a9690) = 426 [pid 7911] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7911] chdir("./141") = 0 [pid 7911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7911] setpgid(0, 0) = 0 [pid 7911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7911] write(3, "1000", 4) = 4 [pid 7911] close(3) = 0 [pid 7911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7911] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7911] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7912 attached [pid 7912] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7911] <... clone3 resumed> => {parent_tid=[427]}, 88) = 427 [pid 7912] set_robust_list(0x7f8785c4c9a0, 24 [pid 7911] rt_sigprocmask(SIG_SETMASK, [], [pid 7912] <... set_robust_list resumed>) = 0 [pid 7911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7912] rt_sigprocmask(SIG_SETMASK, [], [pid 7911] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7911] <... futex resumed>) = 0 [pid 7912] memfd_create("syzkaller", 0 [pid 7911] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7912] <... memfd_create resumed>) = 3 [pid 7912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7912] munmap(0x7f877d82c000, 138412032) = 0 [pid 7912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7912] close(3) = 0 [pid 7912] mkdir("./file0", 0777) = 0 [ 240.445549][ T7912] loop0: detected capacity change from 0 to 32768 [ 240.460342][ T7912] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7912) [ 240.476791][ T7912] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 240.486052][ T7912] BTRFS info (device loop0): force clearing of disk cache [ 240.493152][ T7912] BTRFS info (device loop0): setting nodatasum [ 240.499359][ T7912] BTRFS info (device loop0): allowing degraded mounts [ 240.506148][ T7912] BTRFS info (device loop0): enabling disk space caching [ 240.513160][ T7912] BTRFS info (device loop0): disk space caching is enabled [ 240.534868][ T7912] BTRFS info (device loop0): enabling ssd optimizations [ 240.541825][ T7912] BTRFS info (device loop0): auto enabling async discard [ 240.549866][ T7912] BTRFS info (device loop0): rebuilding free space tree [ 240.561806][ T7912] BTRFS info (device loop0): disabling free space tree [ 240.568769][ T7912] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.578461][ T7912] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7912] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7912] chdir("./file0") = 0 [pid 7912] ioctl(4, LOOP_CLR_FD) = 0 [pid 7912] close(4) = 0 [pid 7912] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7911] <... futex resumed>) = 0 [pid 7912] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7911] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7911] <... futex resumed>) = 0 [pid 7912] open("./file0", O_RDONLY [pid 7911] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7912] <... open resumed>) = 4 [pid 7912] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7911] <... futex resumed>) = 0 [pid 7912] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7911] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7912] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7911] <... futex resumed>) = 0 [pid 7912] <... ioctl resumed>) = 0 [pid 7911] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7912] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7912] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7911] <... futex resumed>) = 0 [pid 7911] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7912] <... futex resumed>) = 0 [ 240.592638][ T7912] BTRFS info (device loop0): checking UUID tree [pid 7911] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7912] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7911] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7911] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[428]}, 88) = 428 [pid 7911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7930 attached [pid 7911] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7930] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7911] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7930] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7930] open("./file0", O_RDONLY) = 5 [pid 7930] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7911] <... futex resumed>) = 0 [pid 7930] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7911] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7911] <... futex resumed>) = 0 [pid 7930] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 240.642018][ T7912] BTRFS info (device loop0): balance: start -d -m [ 240.653086][ T7912] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 240.677724][ T7912] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7911] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7930] <... ioctl resumed>) = 0 [pid 7930] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 240.843652][ T7912] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 240.868619][ T7912] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7930] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7912] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7912] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7911] close(3 [pid 7912] <... futex resumed>) = 0 [pid 7911] <... close resumed>) = 0 [pid 7912] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7911] close(4) = 0 [pid 7911] close(5) = 0 [pid 7911] close(6) = -1 EBADF (Bad file descriptor) [pid 7911] close(7) = -1 EBADF (Bad file descriptor) [pid 7911] close(8) = -1 EBADF (Bad file descriptor) [pid 7911] close(9) = -1 EBADF (Bad file descriptor) [pid 7911] close(10) = -1 EBADF (Bad file descriptor) [pid 7911] close(11) = -1 EBADF (Bad file descriptor) [ 240.887864][ T7912] BTRFS info (device loop0): balance: ended with status: 0 [pid 7911] close(12) = -1 EBADF (Bad file descriptor) [pid 7911] close(13) = -1 EBADF (Bad file descriptor) [pid 7911] close(14) = -1 EBADF (Bad file descriptor) [pid 7911] close(15) = -1 EBADF (Bad file descriptor) [pid 7911] close(16) = -1 EBADF (Bad file descriptor) [pid 7911] close(17) = -1 EBADF (Bad file descriptor) [pid 7911] close(18) = -1 EBADF (Bad file descriptor) [pid 7911] close(19) = -1 EBADF (Bad file descriptor) [pid 7911] close(20) = -1 EBADF (Bad file descriptor) [pid 7911] close(21) = -1 EBADF (Bad file descriptor) [pid 7911] close(22) = -1 EBADF (Bad file descriptor) [pid 7911] close(23) = -1 EBADF (Bad file descriptor) [pid 7911] close(24) = -1 EBADF (Bad file descriptor) [pid 7911] close(25) = -1 EBADF (Bad file descriptor) [pid 7911] close(26) = -1 EBADF (Bad file descriptor) [pid 7911] close(27) = -1 EBADF (Bad file descriptor) [pid 7911] close(28) = -1 EBADF (Bad file descriptor) [pid 7911] close(29) = -1 EBADF (Bad file descriptor) [pid 7911] exit_group(0 [pid 7930] <... futex resumed>) = ? [pid 7930] +++ exited with 0 +++ [pid 7912] <... futex resumed>) = ? [pid 7911] <... exit_group resumed>) = ? [pid 7912] +++ exited with 0 +++ [pid 7911] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=426, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=47 /* 0.47 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./141/binderfs") = 0 [pid 5073] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./141/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./141") = 0 [pid 5073] mkdir("./142", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555570a9690) = 429 ./strace-static-x86_64: Process 7931 attached [pid 7931] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7931] chdir("./142") = 0 [pid 7931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7931] setpgid(0, 0) = 0 [pid 7931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7931] write(3, "1000", 4) = 4 [pid 7931] close(3) = 0 [pid 7931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7931] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7931] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7932 attached [pid 7932] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7932] set_robust_list(0x7f8785c4c9a0, 24 [pid 7931] <... clone3 resumed> => {parent_tid=[430]}, 88) = 430 [pid 7932] <... set_robust_list resumed>) = 0 [pid 7931] rt_sigprocmask(SIG_SETMASK, [], [pid 7932] rt_sigprocmask(SIG_SETMASK, [], [pid 7931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7931] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] memfd_create("syzkaller", 0 [pid 7931] <... futex resumed>) = 0 [pid 7932] <... memfd_create resumed>) = 3 [pid 7931] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7932] munmap(0x7f877d82c000, 138412032) = 0 [pid 7932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7932] close(3) = 0 [pid 7932] mkdir("./file0", 0777) = 0 [ 241.486444][ T7932] loop0: detected capacity change from 0 to 32768 [ 241.502941][ T7932] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7932) [ 241.518972][ T7932] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 241.528337][ T7932] BTRFS info (device loop0): force clearing of disk cache [ 241.535480][ T7932] BTRFS info (device loop0): setting nodatasum [ 241.541626][ T7932] BTRFS info (device loop0): allowing degraded mounts [ 241.548444][ T7932] BTRFS info (device loop0): enabling disk space caching [ 241.555497][ T7932] BTRFS info (device loop0): disk space caching is enabled [ 241.577500][ T7932] BTRFS info (device loop0): enabling ssd optimizations [ 241.584502][ T7932] BTRFS info (device loop0): auto enabling async discard [ 241.592395][ T7932] BTRFS info (device loop0): rebuilding free space tree [ 241.604585][ T7932] BTRFS info (device loop0): disabling free space tree [ 241.611488][ T7932] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.621193][ T7932] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7932] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7932] chdir("./file0") = 0 [pid 7932] ioctl(4, LOOP_CLR_FD) = 0 [pid 7932] close(4) = 0 [pid 7932] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7931] <... futex resumed>) = 0 [pid 7932] <... futex resumed>) = 1 [pid 7931] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] open("./file0", O_RDONLY [pid 7931] <... futex resumed>) = 0 [pid 7931] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7932] <... open resumed>) = 4 [pid 7932] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7931] <... futex resumed>) = 0 [pid 7932] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7931] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] <... ioctl resumed>) = 0 [pid 7931] <... futex resumed>) = 0 [ 241.634974][ T7932] BTRFS info (device loop0): checking UUID tree [pid 7931] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7932] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7931] <... futex resumed>) = 0 [pid 7932] <... futex resumed>) = 1 [pid 7931] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7931] <... futex resumed>) = 0 [pid 7931] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7931] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [ 241.682296][ T7932] BTRFS info (device loop0): balance: start -d -m [ 241.690603][ T7932] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 241.708587][ T7932] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7931] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7949 attached [pid 7949] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 7949] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7949] rt_sigprocmask(SIG_SETMASK, [], [pid 7931] <... clone3 resumed> => {parent_tid=[431]}, 88) = 431 [pid 7949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7931] rt_sigprocmask(SIG_SETMASK, [], [pid 7949] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7931] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7949] <... futex resumed>) = 0 [pid 7931] <... futex resumed>) = 1 [pid 7949] open("./file0", O_RDONLY [pid 7931] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7949] <... open resumed>) = 5 [pid 7949] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7931] <... futex resumed>) = 0 [pid 7949] <... futex resumed>) = 1 [pid 7931] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7949] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 241.741149][ T7932] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 241.768338][ T7932] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 7931] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7949] <... ioctl resumed>) = 0 [pid 7949] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7949] <... futex resumed>) = 0 [pid 7932] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7931] close(3 [pid 7949] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7932] <... futex resumed>) = 0 [pid 7931] <... close resumed>) = 0 [pid 7932] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7931] close(4) = 0 [pid 7931] close(5) = 0 [pid 7931] close(6) = -1 EBADF (Bad file descriptor) [pid 7931] close(7) = -1 EBADF (Bad file descriptor) [pid 7931] close(8) = -1 EBADF (Bad file descriptor) [pid 7931] close(9) = -1 EBADF (Bad file descriptor) [pid 7931] close(10) = -1 EBADF (Bad file descriptor) [pid 7931] close(11) = -1 EBADF (Bad file descriptor) [pid 7931] close(12) = -1 EBADF (Bad file descriptor) [pid 7931] close(13) = -1 EBADF (Bad file descriptor) [pid 7931] close(14) = -1 EBADF (Bad file descriptor) [ 241.855894][ T7932] BTRFS info (device loop0): balance: ended with status: 0 [pid 7931] close(15) = -1 EBADF (Bad file descriptor) [pid 7931] close(16) = -1 EBADF (Bad file descriptor) [pid 7931] close(17) = -1 EBADF (Bad file descriptor) [pid 7931] close(18) = -1 EBADF (Bad file descriptor) [pid 7931] close(19) = -1 EBADF (Bad file descriptor) [pid 7931] close(20) = -1 EBADF (Bad file descriptor) [pid 7931] close(21) = -1 EBADF (Bad file descriptor) [pid 7931] close(22) = -1 EBADF (Bad file descriptor) [pid 7931] close(23) = -1 EBADF (Bad file descriptor) [pid 7931] close(24) = -1 EBADF (Bad file descriptor) [pid 7931] close(25) = -1 EBADF (Bad file descriptor) [pid 7931] close(26) = -1 EBADF (Bad file descriptor) [pid 7931] close(27) = -1 EBADF (Bad file descriptor) [pid 7931] close(28) = -1 EBADF (Bad file descriptor) [pid 7931] close(29) = -1 EBADF (Bad file descriptor) [pid 7931] exit_group(0 [pid 7932] <... futex resumed>) = ? [pid 7949] <... futex resumed>) = ? [pid 7932] +++ exited with 0 +++ [pid 7931] <... exit_group resumed>) = ? [pid 7949] +++ exited with 0 +++ [pid 7931] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=429, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./142/binderfs") = 0 [pid 5073] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./142/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./142") = 0 [pid 5073] mkdir("./143", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7950 attached , child_tidptr=0x5555570a9690) = 432 [pid 7950] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7950] chdir("./143") = 0 [pid 7950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7950] setpgid(0, 0) = 0 [pid 7950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7950] write(3, "1000", 4) = 4 [pid 7950] close(3) = 0 [pid 7950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7950] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7950] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7950] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7951 attached [pid 7951] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 7950] <... clone3 resumed> => {parent_tid=[433]}, 88) = 433 [pid 7951] <... rseq resumed>) = 0 [pid 7950] rt_sigprocmask(SIG_SETMASK, [], [pid 7951] set_robust_list(0x7f8785c4c9a0, 24 [pid 7950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7951] <... set_robust_list resumed>) = 0 [pid 7950] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7951] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7950] <... futex resumed>) = 0 [pid 7950] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7951] memfd_create("syzkaller", 0) = 3 [pid 7951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7951] munmap(0x7f877d82c000, 138412032) = 0 [pid 7951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7951] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7951] close(3) = 0 [pid 7951] mkdir("./file0", 0777) = 0 [ 242.479981][ T7951] loop0: detected capacity change from 0 to 32768 [ 242.494913][ T7951] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7951) [ 242.510545][ T7951] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 242.519806][ T7951] BTRFS info (device loop0): force clearing of disk cache [ 242.526966][ T7951] BTRFS info (device loop0): setting nodatasum [ 242.533128][ T7951] BTRFS info (device loop0): allowing degraded mounts [ 242.539928][ T7951] BTRFS info (device loop0): enabling disk space caching [ 242.546979][ T7951] BTRFS info (device loop0): disk space caching is enabled [ 242.568744][ T7951] BTRFS info (device loop0): enabling ssd optimizations [ 242.575822][ T7951] BTRFS info (device loop0): auto enabling async discard [ 242.584446][ T7951] BTRFS info (device loop0): rebuilding free space tree [ 242.597011][ T7951] BTRFS info (device loop0): disabling free space tree [ 242.603977][ T7951] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 242.613618][ T7951] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7951] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7951] chdir("./file0") = 0 [pid 7951] ioctl(4, LOOP_CLR_FD) = 0 [pid 7951] close(4) = 0 [pid 7951] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 242.626811][ T7951] BTRFS info (device loop0): checking UUID tree [pid 7951] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] <... futex resumed>) = 0 [pid 7950] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7950] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7951] <... futex resumed>) = 0 [pid 7951] open("./file0", O_RDONLY) = 4 [pid 7951] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7950] <... futex resumed>) = 0 [pid 7951] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] <... futex resumed>) = 0 [pid 7951] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7950] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7951] <... ioctl resumed>) = 0 [pid 7951] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7950] <... futex resumed>) = 0 [pid 7951] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] <... futex resumed>) = 0 [pid 7951] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 242.704866][ T7951] BTRFS info (device loop0): balance: start -d -m [ 242.714616][ T7951] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7950] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7950] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7950] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7950] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[434]}, 88) = 434 [pid 7950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7950] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7969 attached ) = 0 [pid 7969] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7950] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7969] <... rseq resumed>) = 0 [pid 7969] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 7969] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7969] open("./file0", O_RDONLY) = 5 [pid 7969] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7950] <... futex resumed>) = 0 [pid 7969] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7950] <... futex resumed>) = 0 [pid 7969] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 242.747955][ T7951] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7950] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7969] <... ioctl resumed>) = 0 [pid 7969] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7969] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7951] <... ioctl resumed>) = -1 ENOSPC (No space left on device) [pid 7951] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7950] close(3) = 0 [pid 7950] close(4 [pid 7951] <... futex resumed>) = 0 [pid 7951] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7950] <... close resumed>) = 0 [pid 7950] close(5) = 0 [pid 7950] close(6) = -1 EBADF (Bad file descriptor) [pid 7950] close(7) = -1 EBADF (Bad file descriptor) [pid 7950] close(8) = -1 EBADF (Bad file descriptor) [pid 7950] close(9) = -1 EBADF (Bad file descriptor) [pid 7950] close(10) = -1 EBADF (Bad file descriptor) [pid 7950] close(11) = -1 EBADF (Bad file descriptor) [pid 7950] close(12) = -1 EBADF (Bad file descriptor) [ 242.890962][ T7951] BTRFS info (device loop0): 1 enospc errors during balance [ 242.899171][ T7951] BTRFS info (device loop0): balance: ended with status: -28 [pid 7950] close(13) = -1 EBADF (Bad file descriptor) [pid 7950] close(14) = -1 EBADF (Bad file descriptor) [pid 7950] close(15) = -1 EBADF (Bad file descriptor) [pid 7950] close(16) = -1 EBADF (Bad file descriptor) [pid 7950] close(17) = -1 EBADF (Bad file descriptor) [pid 7950] close(18) = -1 EBADF (Bad file descriptor) [pid 7950] close(19) = -1 EBADF (Bad file descriptor) [pid 7950] close(20) = -1 EBADF (Bad file descriptor) [pid 7950] close(21) = -1 EBADF (Bad file descriptor) [pid 7950] close(22) = -1 EBADF (Bad file descriptor) [pid 7950] close(23) = -1 EBADF (Bad file descriptor) [pid 7950] close(24) = -1 EBADF (Bad file descriptor) [pid 7950] close(25) = -1 EBADF (Bad file descriptor) [pid 7950] close(26) = -1 EBADF (Bad file descriptor) [pid 7950] close(27) = -1 EBADF (Bad file descriptor) [pid 7950] close(28) = -1 EBADF (Bad file descriptor) [pid 7950] close(29) = -1 EBADF (Bad file descriptor) [pid 7950] exit_group(0 [pid 7969] <... futex resumed>) = ? [pid 7951] <... futex resumed>) = ? [pid 7950] <... exit_group resumed>) = ? [pid 7969] +++ exited with 0 +++ [pid 7951] +++ exited with 0 +++ [pid 7950] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=432, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5073] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./143/binderfs") = 0 [pid 5073] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./143/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./143") = 0 [pid 5073] mkdir("./144", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7970 attached , child_tidptr=0x5555570a9690) = 435 [pid 7970] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7970] chdir("./144") = 0 [pid 7970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7970] setpgid(0, 0) = 0 [pid 7970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7970] write(3, "1000", 4) = 4 [pid 7970] close(3) = 0 [pid 7970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7970] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7970] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7971 attached [pid 7971] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7970] <... clone3 resumed> => {parent_tid=[436]}, 88) = 436 [pid 7971] set_robust_list(0x7f8785c4c9a0, 24 [pid 7970] rt_sigprocmask(SIG_SETMASK, [], [pid 7971] <... set_robust_list resumed>) = 0 [pid 7970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7971] rt_sigprocmask(SIG_SETMASK, [], [pid 7970] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7970] <... futex resumed>) = 0 [pid 7970] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7971] memfd_create("syzkaller", 0) = 3 [pid 7971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7971] munmap(0x7f877d82c000, 138412032) = 0 [pid 7971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7971] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7971] close(3) = 0 [pid 7971] mkdir("./file0", 0777) = 0 [ 243.557430][ T7971] loop0: detected capacity change from 0 to 32768 [ 243.577158][ T7971] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7971) [ 243.592929][ T7971] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 243.602213][ T7971] BTRFS info (device loop0): force clearing of disk cache [ 243.609378][ T7971] BTRFS info (device loop0): setting nodatasum [ 243.615582][ T7971] BTRFS info (device loop0): allowing degraded mounts [ 243.622348][ T7971] BTRFS info (device loop0): enabling disk space caching [ 243.629438][ T7971] BTRFS info (device loop0): disk space caching is enabled [ 243.650461][ T7971] BTRFS info (device loop0): enabling ssd optimizations [ 243.657946][ T7971] BTRFS info (device loop0): auto enabling async discard [ 243.666181][ T7971] BTRFS info (device loop0): rebuilding free space tree [ 243.678786][ T7971] BTRFS info (device loop0): disabling free space tree [ 243.686011][ T7971] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.696072][ T7971] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7971] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7971] chdir("./file0") = 0 [pid 7971] ioctl(4, LOOP_CLR_FD) = 0 [pid 7971] close(4) = 0 [pid 7971] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7971] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7970] <... futex resumed>) = 0 [pid 7970] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7970] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7971] <... futex resumed>) = 0 [pid 7971] open("./file0", O_RDONLY) = 4 [pid 7971] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7970] <... futex resumed>) = 0 [pid 7971] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7970] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7971] <... ioctl resumed>) = 0 [pid 7970] <... futex resumed>) = 0 [ 243.710009][ T7971] BTRFS info (device loop0): checking UUID tree [pid 7970] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7971] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7970] <... futex resumed>) = 0 [pid 7971] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7970] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 243.790975][ T7971] BTRFS info (device loop0): balance: start -d -m [ 243.799959][ T7971] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7970] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7970] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7970] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 7989 attached => {parent_tid=[437]}, 88) = 437 [pid 7989] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 7970] rt_sigprocmask(SIG_SETMASK, [], [pid 7989] <... rseq resumed>) = 0 [pid 7970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7989] set_robust_list(0x7f8785c2b9a0, 24 [pid 7970] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7989] <... set_robust_list resumed>) = 0 [pid 7989] rt_sigprocmask(SIG_SETMASK, [], [pid 7970] <... futex resumed>) = 0 [pid 7989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7970] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7989] open("./file0", O_RDONLY) = 5 [pid 7989] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7970] <... futex resumed>) = 0 [pid 7989] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 7970] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 243.832030][ T7971] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7970] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7989] <... ioctl resumed>) = 0 [pid 7989] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 243.974949][ T7971] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 243.998711][ T7971] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 244.018203][ T7971] BTRFS info (device loop0): balance: ended with status: 0 [pid 7989] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7971] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7971] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 7970] close(3 [pid 7971] <... futex resumed>) = 0 [pid 7970] <... close resumed>) = 0 [pid 7971] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7970] close(4) = 0 [pid 7970] close(5) = 0 [pid 7970] close(6) = -1 EBADF (Bad file descriptor) [pid 7970] close(7) = -1 EBADF (Bad file descriptor) [pid 7970] close(8) = -1 EBADF (Bad file descriptor) [pid 7970] close(9) = -1 EBADF (Bad file descriptor) [pid 7970] close(10) = -1 EBADF (Bad file descriptor) [pid 7970] close(11) = -1 EBADF (Bad file descriptor) [pid 7970] close(12) = -1 EBADF (Bad file descriptor) [pid 7970] close(13) = -1 EBADF (Bad file descriptor) [pid 7970] close(14) = -1 EBADF (Bad file descriptor) [pid 7970] close(15) = -1 EBADF (Bad file descriptor) [pid 7970] close(16) = -1 EBADF (Bad file descriptor) [pid 7970] close(17) = -1 EBADF (Bad file descriptor) [pid 7970] close(18) = -1 EBADF (Bad file descriptor) [pid 7970] close(19) = -1 EBADF (Bad file descriptor) [pid 7970] close(20) = -1 EBADF (Bad file descriptor) [pid 7970] close(21) = -1 EBADF (Bad file descriptor) [pid 7970] close(22) = -1 EBADF (Bad file descriptor) [pid 7970] close(23) = -1 EBADF (Bad file descriptor) [pid 7970] close(24) = -1 EBADF (Bad file descriptor) [pid 7970] close(25) = -1 EBADF (Bad file descriptor) [pid 7970] close(26) = -1 EBADF (Bad file descriptor) [pid 7970] close(27) = -1 EBADF (Bad file descriptor) [pid 7970] close(28) = -1 EBADF (Bad file descriptor) [pid 7970] close(29) = -1 EBADF (Bad file descriptor) [pid 7970] exit_group(0 [pid 7989] <... futex resumed>) = ? [pid 7971] <... futex resumed>) = ? [pid 7970] <... exit_group resumed>) = ? [pid 7989] +++ exited with 0 +++ [pid 7971] +++ exited with 0 +++ [pid 7970] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5073] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./144/binderfs") = 0 [pid 5073] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./144/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./144") = 0 [pid 5073] mkdir("./145", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7990 attached , child_tidptr=0x5555570a9690) = 438 [pid 7990] set_robust_list(0x5555570a96a0, 24) = 0 [pid 7990] chdir("./145") = 0 [pid 7990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7990] setpgid(0, 0) = 0 [pid 7990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7990] write(3, "1000", 4) = 4 [pid 7990] close(3) = 0 [pid 7990] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7990] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7990] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 7990] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7990] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7990] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 7991 attached [pid 7991] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 7991] set_robust_list(0x7f8785c4c9a0, 24 [pid 7990] <... clone3 resumed> => {parent_tid=[439]}, 88) = 439 [pid 7991] <... set_robust_list resumed>) = 0 [pid 7990] rt_sigprocmask(SIG_SETMASK, [], [pid 7991] rt_sigprocmask(SIG_SETMASK, [], [pid 7990] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7990] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7991] memfd_create("syzkaller", 0 [pid 7990] <... futex resumed>) = 0 [pid 7990] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7991] <... memfd_create resumed>) = 3 [pid 7991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 7991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 7991] munmap(0x7f877d82c000, 138412032) = 0 [pid 7991] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7991] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7991] close(3) = 0 [pid 7991] mkdir("./file0", 0777) = 0 [ 244.631109][ T7991] loop0: detected capacity change from 0 to 32768 [ 244.646300][ T7991] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (7991) [ 244.661171][ T7991] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 244.670484][ T7991] BTRFS info (device loop0): force clearing of disk cache [ 244.677652][ T7991] BTRFS info (device loop0): setting nodatasum [ 244.683820][ T7991] BTRFS info (device loop0): allowing degraded mounts [ 244.690638][ T7991] BTRFS info (device loop0): enabling disk space caching [ 244.697715][ T7991] BTRFS info (device loop0): disk space caching is enabled [ 244.719366][ T7991] BTRFS info (device loop0): enabling ssd optimizations [ 244.726543][ T7991] BTRFS info (device loop0): auto enabling async discard [ 244.734740][ T7991] BTRFS info (device loop0): rebuilding free space tree [ 244.746895][ T7991] BTRFS info (device loop0): disabling free space tree [ 244.754137][ T7991] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.763786][ T7991] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 7991] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 7991] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7991] chdir("./file0") = 0 [pid 7991] ioctl(4, LOOP_CLR_FD) = 0 [pid 7991] close(4) = 0 [pid 7991] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7990] <... futex resumed>) = 0 [pid 7991] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7991] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7990] <... futex resumed>) = 0 [pid 7991] open("./file0", O_RDONLY [pid 7990] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7991] <... open resumed>) = 4 [ 244.777491][ T7991] BTRFS info (device loop0): checking UUID tree [pid 7991] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7991] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] <... futex resumed>) = 0 [pid 7990] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7991] <... futex resumed>) = 0 [pid 7990] <... futex resumed>) = 1 [pid 7991] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 7990] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7991] <... ioctl resumed>) = 0 [pid 7991] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7990] <... futex resumed>) = 0 [pid 7991] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 7990] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 244.841118][ T7991] BTRFS info (device loop0): balance: start -d -m [ 244.851581][ T7991] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 7990] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7990] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7990] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 7990] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7990] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7990] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[440]}, 88) = 440 [pid 7990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7990] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7990] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8009 attached [pid 8009] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8009] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8009] open("./file0", O_RDONLY) = 5 [pid 8009] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7990] <... futex resumed>) = 0 [pid 8009] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7990] <... futex resumed>) = 0 [pid 8009] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 244.882103][ T7991] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 7990] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8009] <... ioctl resumed>) = 0 [pid 8009] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8009] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7991] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 7991] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7991] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7990] close(3) = 0 [pid 7990] close(4) = 0 [pid 7990] close(5) = 0 [pid 7990] close(6) = -1 EBADF (Bad file descriptor) [pid 7990] close(7) = -1 EBADF (Bad file descriptor) [ 245.047957][ T7991] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 245.071874][ T7991] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 245.090727][ T7991] BTRFS info (device loop0): balance: ended with status: 0 [pid 7990] close(8) = -1 EBADF (Bad file descriptor) [pid 7990] close(9) = -1 EBADF (Bad file descriptor) [pid 7990] close(10) = -1 EBADF (Bad file descriptor) [pid 7990] close(11) = -1 EBADF (Bad file descriptor) [pid 7990] close(12) = -1 EBADF (Bad file descriptor) [pid 7990] close(13) = -1 EBADF (Bad file descriptor) [pid 7990] close(14) = -1 EBADF (Bad file descriptor) [pid 7990] close(15) = -1 EBADF (Bad file descriptor) [pid 7990] close(16) = -1 EBADF (Bad file descriptor) [pid 7990] close(17) = -1 EBADF (Bad file descriptor) [pid 7990] close(18) = -1 EBADF (Bad file descriptor) [pid 7990] close(19) = -1 EBADF (Bad file descriptor) [pid 7990] close(20) = -1 EBADF (Bad file descriptor) [pid 7990] close(21) = -1 EBADF (Bad file descriptor) [pid 7990] close(22) = -1 EBADF (Bad file descriptor) [pid 7990] close(23) = -1 EBADF (Bad file descriptor) [pid 7990] close(24) = -1 EBADF (Bad file descriptor) [pid 7990] close(25) = -1 EBADF (Bad file descriptor) [pid 7990] close(26) = -1 EBADF (Bad file descriptor) [pid 7990] close(27) = -1 EBADF (Bad file descriptor) [pid 7990] close(28) = -1 EBADF (Bad file descriptor) [pid 7990] close(29) = -1 EBADF (Bad file descriptor) [pid 7990] exit_group(0) = ? [pid 8009] <... futex resumed>) = ? [pid 7991] <... futex resumed>) = ? [pid 7991] +++ exited with 0 +++ [pid 8009] +++ exited with 0 +++ [pid 7990] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./145/binderfs") = 0 [pid 5073] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./145/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./145") = 0 [pid 5073] mkdir("./146", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8010 attached [pid 8010] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 441 [pid 8010] <... set_robust_list resumed>) = 0 [pid 8010] chdir("./146") = 0 [pid 8010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8010] setpgid(0, 0) = 0 [pid 8010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8010] write(3, "1000", 4) = 4 [pid 8010] close(3) = 0 [pid 8010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8010] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8010] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8011 attached [pid 8011] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 8010] <... clone3 resumed> => {parent_tid=[442]}, 88) = 442 [pid 8011] <... rseq resumed>) = 0 [pid 8010] rt_sigprocmask(SIG_SETMASK, [], [pid 8011] set_robust_list(0x7f8785c4c9a0, 24 [pid 8010] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8011] <... set_robust_list resumed>) = 0 [pid 8010] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] rt_sigprocmask(SIG_SETMASK, [], [pid 8010] <... futex resumed>) = 0 [pid 8011] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8010] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8011] memfd_create("syzkaller", 0) = 3 [pid 8011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8011] munmap(0x7f877d82c000, 138412032) = 0 [pid 8011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8011] close(3) = 0 [pid 8011] mkdir("./file0", 0777) = 0 [ 245.791583][ T8011] loop0: detected capacity change from 0 to 32768 [ 245.815692][ T8011] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8011) [ 245.831990][ T8011] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 245.841317][ T8011] BTRFS info (device loop0): force clearing of disk cache [ 245.848494][ T8011] BTRFS info (device loop0): setting nodatasum [ 245.854709][ T8011] BTRFS info (device loop0): allowing degraded mounts [ 245.861488][ T8011] BTRFS info (device loop0): enabling disk space caching [ 245.868776][ T8011] BTRFS info (device loop0): disk space caching is enabled [ 245.890427][ T8011] BTRFS info (device loop0): enabling ssd optimizations [ 245.897426][ T8011] BTRFS info (device loop0): auto enabling async discard [ 245.905541][ T8011] BTRFS info (device loop0): rebuilding free space tree [ 245.917771][ T8011] BTRFS info (device loop0): disabling free space tree [ 245.924704][ T8011] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8011] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8011] chdir("./file0") = 0 [pid 8011] ioctl(4, LOOP_CLR_FD) = 0 [pid 8011] close(4) = 0 [pid 8011] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8011] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8010] <... futex resumed>) = 0 [pid 8010] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8011] <... futex resumed>) = 0 [pid 8010] <... futex resumed>) = 1 [pid 8011] open("./file0", O_RDONLY [pid 8010] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8011] <... open resumed>) = 4 [ 245.934565][ T8011] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 245.947777][ T8011] BTRFS info (device loop0): checking UUID tree [pid 8011] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8010] <... futex resumed>) = 0 [pid 8011] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8010] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8010] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8011] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 8011] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8010] <... futex resumed>) = 0 [pid 8010] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8011] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 246.035014][ T8011] BTRFS info (device loop0): balance: start -d -m [ 246.042879][ T8011] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 8010] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8010] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8010] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[443]}, 88) = 443 [pid 8010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8010] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8010] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8029 attached [pid 8029] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8029] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8029] open("./file0", O_RDONLY) = 5 [pid 8029] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8010] <... futex resumed>) = 0 [pid 8010] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8010] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 246.076713][ T8011] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8029] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 8010] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8010] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8029] <... ioctl resumed>) = 0 [pid 8029] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8029] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8011] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8011] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8011] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8010] close(3) = 0 [pid 8010] close(4) = 0 [pid 8010] close(5) = 0 [pid 8010] close(6) = -1 EBADF (Bad file descriptor) [pid 8010] close(7) = -1 EBADF (Bad file descriptor) [ 246.229596][ T8011] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 246.252932][ T8011] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 246.272323][ T8011] BTRFS info (device loop0): balance: ended with status: 0 [pid 8010] close(8) = -1 EBADF (Bad file descriptor) [pid 8010] close(9) = -1 EBADF (Bad file descriptor) [pid 8010] close(10) = -1 EBADF (Bad file descriptor) [pid 8010] close(11) = -1 EBADF (Bad file descriptor) [pid 8010] close(12) = -1 EBADF (Bad file descriptor) [pid 8010] close(13) = -1 EBADF (Bad file descriptor) [pid 8010] close(14) = -1 EBADF (Bad file descriptor) [pid 8010] close(15) = -1 EBADF (Bad file descriptor) [pid 8010] close(16) = -1 EBADF (Bad file descriptor) [pid 8010] close(17) = -1 EBADF (Bad file descriptor) [pid 8010] close(18) = -1 EBADF (Bad file descriptor) [pid 8010] close(19) = -1 EBADF (Bad file descriptor) [pid 8010] close(20) = -1 EBADF (Bad file descriptor) [pid 8010] close(21) = -1 EBADF (Bad file descriptor) [pid 8010] close(22) = -1 EBADF (Bad file descriptor) [pid 8010] close(23) = -1 EBADF (Bad file descriptor) [pid 8010] close(24) = -1 EBADF (Bad file descriptor) [pid 8010] close(25) = -1 EBADF (Bad file descriptor) [pid 8010] close(26) = -1 EBADF (Bad file descriptor) [pid 8010] close(27) = -1 EBADF (Bad file descriptor) [pid 8010] close(28) = -1 EBADF (Bad file descriptor) [pid 8010] close(29) = -1 EBADF (Bad file descriptor) [pid 8010] exit_group(0 [pid 8011] <... futex resumed>) = ? [pid 8011] +++ exited with 0 +++ [pid 8029] <... futex resumed>) = ? [pid 8010] <... exit_group resumed>) = ? [pid 8029] +++ exited with 0 +++ [pid 8010] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=441, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./146/binderfs") = 0 [pid 5073] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./146/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./146") = 0 [pid 5073] mkdir("./147", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8030 attached [pid 8030] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 444 [pid 8030] <... set_robust_list resumed>) = 0 [pid 8030] chdir("./147") = 0 [pid 8030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8030] setpgid(0, 0) = 0 [pid 8030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8030] write(3, "1000", 4) = 4 [pid 8030] close(3) = 0 [pid 8030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8030] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8030] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8030] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8030] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8031 attached [pid 8031] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 8030] <... clone3 resumed> => {parent_tid=[445]}, 88) = 445 [pid 8031] set_robust_list(0x7f8785c4c9a0, 24 [pid 8030] rt_sigprocmask(SIG_SETMASK, [], [pid 8031] <... set_robust_list resumed>) = 0 [pid 8031] rt_sigprocmask(SIG_SETMASK, [], [pid 8030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8031] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8030] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8031] memfd_create("syzkaller", 0 [pid 8030] <... futex resumed>) = 0 [pid 8030] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8031] <... memfd_create resumed>) = 3 [pid 8031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8031] munmap(0x7f877d82c000, 138412032) = 0 [pid 8031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8031] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8031] close(3) = 0 [pid 8031] mkdir("./file0", 0777) = 0 [ 246.835069][ T8031] loop0: detected capacity change from 0 to 32768 [ 246.845822][ T8031] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8031) [ 246.861401][ T8031] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 246.870683][ T8031] BTRFS info (device loop0): force clearing of disk cache [ 246.877836][ T8031] BTRFS info (device loop0): setting nodatasum [ 246.884109][ T8031] BTRFS info (device loop0): allowing degraded mounts [ 246.890892][ T8031] BTRFS info (device loop0): enabling disk space caching [ 246.898038][ T8031] BTRFS info (device loop0): disk space caching is enabled [ 246.920280][ T8031] BTRFS info (device loop0): enabling ssd optimizations [ 246.927382][ T8031] BTRFS info (device loop0): auto enabling async discard [pid 8031] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8031] chdir("./file0") = 0 [pid 8031] ioctl(4, LOOP_CLR_FD) = 0 [pid 8031] close(4) = 0 [pid 8031] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 8030] <... futex resumed>) = 0 [pid 8031] <... futex resumed>) = 1 [pid 8030] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8031] open("./file0", O_RDONLY) = 4 [pid 8030] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8031] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8030] <... futex resumed>) = 0 [pid 8030] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8031] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8030] <... futex resumed>) = 0 [pid 8031] <... ioctl resumed>) = 0 [pid 8030] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8031] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8030] <... futex resumed>) = 0 [pid 8030] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8031] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8030] <... futex resumed>) = 0 [ 246.935869][ T8031] BTRFS info (device loop0): rebuilding free space tree [ 246.948430][ T8031] BTRFS info (device loop0): disabling free space tree [ 246.955368][ T8031] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.965054][ T8031] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.978318][ T8031] BTRFS info (device loop0): checking UUID tree [pid 8030] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8030] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [ 247.019398][ T8031] BTRFS info (device loop0): balance: start -d -m [ 247.028473][ T8031] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 247.054625][ T8031] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8030] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8030] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8030] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 8049 attached => {parent_tid=[446]}, 88) = 446 [pid 8049] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 8030] rt_sigprocmask(SIG_SETMASK, [], [pid 8049] <... rseq resumed>) = 0 [pid 8030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8049] set_robust_list(0x7f8785c2b9a0, 24 [pid 8030] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8049] <... set_robust_list resumed>) = 0 [pid 8030] <... futex resumed>) = 0 [pid 8049] rt_sigprocmask(SIG_SETMASK, [], [pid 8030] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8049] open("./file0", O_RDONLY) = 5 [pid 8049] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8030] <... futex resumed>) = 0 [pid 8030] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8049] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 8030] <... futex resumed>) = 0 [ 247.105933][ T8031] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 8030] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 247.197180][ T8031] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8049] <... ioctl resumed>) = 0 [pid 8049] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8049] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8031] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8031] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8031] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8030] close(3) = 0 [pid 8030] close(4) = 0 [pid 8030] close(5) = 0 [pid 8030] close(6) = -1 EBADF (Bad file descriptor) [pid 8030] close(7) = -1 EBADF (Bad file descriptor) [ 247.265769][ T8031] BTRFS info (device loop0): balance: ended with status: 0 [pid 8030] close(8) = -1 EBADF (Bad file descriptor) [pid 8030] close(9) = -1 EBADF (Bad file descriptor) [pid 8030] close(10) = -1 EBADF (Bad file descriptor) [pid 8030] close(11) = -1 EBADF (Bad file descriptor) [pid 8030] close(12) = -1 EBADF (Bad file descriptor) [pid 8030] close(13) = -1 EBADF (Bad file descriptor) [pid 8030] close(14) = -1 EBADF (Bad file descriptor) [pid 8030] close(15) = -1 EBADF (Bad file descriptor) [pid 8030] close(16) = -1 EBADF (Bad file descriptor) [pid 8030] close(17) = -1 EBADF (Bad file descriptor) [pid 8030] close(18) = -1 EBADF (Bad file descriptor) [pid 8030] close(19) = -1 EBADF (Bad file descriptor) [pid 8030] close(20) = -1 EBADF (Bad file descriptor) [pid 8030] close(21) = -1 EBADF (Bad file descriptor) [pid 8030] close(22) = -1 EBADF (Bad file descriptor) [pid 8030] close(23) = -1 EBADF (Bad file descriptor) [pid 8030] close(24) = -1 EBADF (Bad file descriptor) [pid 8030] close(25) = -1 EBADF (Bad file descriptor) [pid 8030] close(26) = -1 EBADF (Bad file descriptor) [pid 8030] close(27) = -1 EBADF (Bad file descriptor) [pid 8030] close(28) = -1 EBADF (Bad file descriptor) [pid 8030] close(29) = -1 EBADF (Bad file descriptor) [pid 8030] exit_group(0) = ? [pid 8031] <... futex resumed>) = ? [pid 8031] +++ exited with 0 +++ [pid 8049] <... futex resumed>) = ? [pid 8049] +++ exited with 0 +++ [pid 8030] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=444, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=45 /* 0.45 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./147/binderfs") = 0 [pid 5073] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./147/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./147") = 0 [pid 5073] mkdir("./148", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8050 attached , child_tidptr=0x5555570a9690) = 447 [pid 8050] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8050] chdir("./148") = 0 [pid 8050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8050] setpgid(0, 0) = 0 [pid 8050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8050] write(3, "1000", 4) = 4 [pid 8050] close(3) = 0 [pid 8050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8050] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8050] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8051 attached [pid 8051] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 8051] set_robust_list(0x7f8785c4c9a0, 24 [pid 8050] <... clone3 resumed> => {parent_tid=[448]}, 88) = 448 [pid 8051] <... set_robust_list resumed>) = 0 [pid 8051] rt_sigprocmask(SIG_SETMASK, [], [pid 8050] rt_sigprocmask(SIG_SETMASK, [], [pid 8051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8051] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8050] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8050] <... futex resumed>) = 0 [pid 8051] memfd_create("syzkaller", 0 [pid 8050] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8051] <... memfd_create resumed>) = 3 [pid 8051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8051] munmap(0x7f877d82c000, 138412032) = 0 [pid 8051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8051] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8051] close(3) = 0 [pid 8051] mkdir("./file0", 0777) = 0 [ 247.915321][ T8051] loop0: detected capacity change from 0 to 32768 [ 247.930352][ T8051] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8051) [ 247.946994][ T8051] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 247.956257][ T8051] BTRFS info (device loop0): force clearing of disk cache [ 247.963358][ T8051] BTRFS info (device loop0): setting nodatasum [ 247.969541][ T8051] BTRFS info (device loop0): allowing degraded mounts [ 247.976336][ T8051] BTRFS info (device loop0): enabling disk space caching [ 247.983347][ T8051] BTRFS info (device loop0): disk space caching is enabled [ 248.006215][ T8051] BTRFS info (device loop0): enabling ssd optimizations [ 248.013173][ T8051] BTRFS info (device loop0): auto enabling async discard [ 248.021214][ T8051] BTRFS info (device loop0): rebuilding free space tree [ 248.033362][ T8051] BTRFS info (device loop0): disabling free space tree [ 248.040311][ T8051] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8051] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8051] chdir("./file0") = 0 [pid 8051] ioctl(4, LOOP_CLR_FD) = 0 [pid 8051] close(4) = 0 [pid 8051] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8051] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8050] <... futex resumed>) = 0 [pid 8050] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8051] <... futex resumed>) = 0 [pid 8050] <... futex resumed>) = 1 [pid 8050] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 248.050002][ T8051] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 248.063520][ T8051] BTRFS info (device loop0): checking UUID tree [pid 8051] open("./file0", O_RDONLY) = 4 [pid 8051] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8051] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8050] <... futex resumed>) = 0 [pid 8050] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8051] <... futex resumed>) = 0 [pid 8050] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8051] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840) = 0 [pid 8051] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8050] <... futex resumed>) = 0 [pid 8051] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8050] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8051] <... futex resumed>) = 0 [pid 8051] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8050] <... futex resumed>) = 1 [pid 8050] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8050] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8050] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[449]}, 88) = 449 [pid 8050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8050] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8050] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8069 attached [pid 8069] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8069] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8069] open("./file0", O_RDONLY) = 5 [pid 8069] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8069] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8050] <... futex resumed>) = 0 [pid 8050] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8069] <... futex resumed>) = 0 [pid 8050] <... futex resumed>) = 1 [pid 8069] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 248.144409][ T8051] BTRFS info (device loop0): balance: start -d -m [ 248.153272][ T8051] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 248.183548][ T8051] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8050] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8069] <... ioctl resumed>) = 0 [pid 8069] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 248.342369][ T8051] BTRFS info (device loop0): found 8 extents, stage: move data extents [ 248.367602][ T8051] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8069] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8051] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8051] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8051] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8050] close(3) = 0 [pid 8050] close(4) = 0 [pid 8050] close(5) = 0 [pid 8050] close(6) = -1 EBADF (Bad file descriptor) [pid 8050] close(7) = -1 EBADF (Bad file descriptor) [ 248.386973][ T8051] BTRFS info (device loop0): balance: ended with status: 0 [pid 8050] close(8) = -1 EBADF (Bad file descriptor) [pid 8050] close(9) = -1 EBADF (Bad file descriptor) [pid 8050] close(10) = -1 EBADF (Bad file descriptor) [pid 8050] close(11) = -1 EBADF (Bad file descriptor) [pid 8050] close(12) = -1 EBADF (Bad file descriptor) [pid 8050] close(13) = -1 EBADF (Bad file descriptor) [pid 8050] close(14) = -1 EBADF (Bad file descriptor) [pid 8050] close(15) = -1 EBADF (Bad file descriptor) [pid 8050] close(16) = -1 EBADF (Bad file descriptor) [pid 8050] close(17) = -1 EBADF (Bad file descriptor) [pid 8050] close(18) = -1 EBADF (Bad file descriptor) [pid 8050] close(19) = -1 EBADF (Bad file descriptor) [pid 8050] close(20) = -1 EBADF (Bad file descriptor) [pid 8050] close(21) = -1 EBADF (Bad file descriptor) [pid 8050] close(22) = -1 EBADF (Bad file descriptor) [pid 8050] close(23) = -1 EBADF (Bad file descriptor) [pid 8050] close(24) = -1 EBADF (Bad file descriptor) [pid 8050] close(25) = -1 EBADF (Bad file descriptor) [pid 8050] close(26) = -1 EBADF (Bad file descriptor) [pid 8050] close(27) = -1 EBADF (Bad file descriptor) [pid 8050] close(28) = -1 EBADF (Bad file descriptor) [pid 8050] close(29) = -1 EBADF (Bad file descriptor) [pid 8050] exit_group(0) = ? [pid 8069] <... futex resumed>) = ? [pid 8051] <... futex resumed>) = ? [pid 8069] +++ exited with 0 +++ [pid 8051] +++ exited with 0 +++ [pid 8050] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=447, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./148/binderfs") = 0 [pid 5073] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./148/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./148") = 0 [pid 5073] mkdir("./149", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8070 attached , child_tidptr=0x5555570a9690) = 450 [pid 8070] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8070] chdir("./149") = 0 [pid 8070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8070] setpgid(0, 0) = 0 [pid 8070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8070] write(3, "1000", 4) = 4 [pid 8070] close(3) = 0 [pid 8070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8070] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8070] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8071 attached [pid 8071] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 8071] set_robust_list(0x7f8785c4c9a0, 24 [pid 8070] <... clone3 resumed> => {parent_tid=[451]}, 88) = 451 [pid 8071] <... set_robust_list resumed>) = 0 [pid 8070] rt_sigprocmask(SIG_SETMASK, [], [pid 8071] rt_sigprocmask(SIG_SETMASK, [], [pid 8070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8071] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8070] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8071] memfd_create("syzkaller", 0 [pid 8070] <... futex resumed>) = 0 [pid 8070] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8071] <... memfd_create resumed>) = 3 [pid 8071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8071] munmap(0x7f877d82c000, 138412032) = 0 [pid 8071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8071] close(3) = 0 [pid 8071] mkdir("./file0", 0777) = 0 [ 249.083587][ T8071] loop0: detected capacity change from 0 to 32768 [ 249.110223][ T8071] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8071) [ 249.126242][ T8071] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.135564][ T8071] BTRFS info (device loop0): force clearing of disk cache [ 249.142689][ T8071] BTRFS info (device loop0): setting nodatasum [ 249.148904][ T8071] BTRFS info (device loop0): allowing degraded mounts [ 249.155746][ T8071] BTRFS info (device loop0): enabling disk space caching [ 249.162756][ T8071] BTRFS info (device loop0): disk space caching is enabled [ 249.184002][ T8071] BTRFS info (device loop0): enabling ssd optimizations [ 249.190962][ T8071] BTRFS info (device loop0): auto enabling async discard [ 249.199005][ T8071] BTRFS info (device loop0): rebuilding free space tree [ 249.210700][ T8071] BTRFS info (device loop0): disabling free space tree [ 249.217706][ T8071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8071] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8071] chdir("./file0") = 0 [pid 8071] ioctl(4, LOOP_CLR_FD) = 0 [pid 8071] close(4) = 0 [pid 8071] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8071] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8070] <... futex resumed>) = 0 [pid 8070] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8070] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8071] <... futex resumed>) = 0 [pid 8071] open("./file0", O_RDONLY) = 4 [pid 8071] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8071] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8070] <... futex resumed>) = 0 [pid 8071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8070] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8071] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8070] <... futex resumed>) = 0 [pid 8071] <... ioctl resumed>) = 0 [pid 8070] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8071] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8070] <... futex resumed>) = 0 [pid 8070] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8071] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8070] <... futex resumed>) = 0 [ 249.227562][ T8071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 249.241105][ T8071] BTRFS info (device loop0): checking UUID tree [pid 8070] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8070] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8070] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[452]}, 88) = 452 [pid 8070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8070] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8070] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8089 attached [pid 8089] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8089] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8089] open("./file0", O_RDONLY) = 5 [pid 8089] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8070] <... futex resumed>) = 0 [pid 8089] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8070] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8089] <... futex resumed>) = 0 [pid 8070] <... futex resumed>) = 1 [pid 8089] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 249.295985][ T8071] BTRFS info (device loop0): balance: start -d -m [ 249.306455][ T8071] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 249.335774][ T8071] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8070] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8089] <... ioctl resumed>) = 0 [pid 8089] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 249.508494][ T8071] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 249.532274][ T8071] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8089] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8071] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8071] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8071] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8070] close(3) = 0 [pid 8070] close(4) = 0 [pid 8070] close(5) = 0 [pid 8070] close(6) = -1 EBADF (Bad file descriptor) [pid 8070] close(7) = -1 EBADF (Bad file descriptor) [pid 8070] close(8) = -1 EBADF (Bad file descriptor) [pid 8070] close(9) = -1 EBADF (Bad file descriptor) [ 249.552119][ T8071] BTRFS info (device loop0): balance: ended with status: 0 [pid 8070] close(10) = -1 EBADF (Bad file descriptor) [pid 8070] close(11) = -1 EBADF (Bad file descriptor) [pid 8070] close(12) = -1 EBADF (Bad file descriptor) [pid 8070] close(13) = -1 EBADF (Bad file descriptor) [pid 8070] close(14) = -1 EBADF (Bad file descriptor) [pid 8070] close(15) = -1 EBADF (Bad file descriptor) [pid 8070] close(16) = -1 EBADF (Bad file descriptor) [pid 8070] close(17) = -1 EBADF (Bad file descriptor) [pid 8070] close(18) = -1 EBADF (Bad file descriptor) [pid 8070] close(19) = -1 EBADF (Bad file descriptor) [pid 8070] close(20) = -1 EBADF (Bad file descriptor) [pid 8070] close(21) = -1 EBADF (Bad file descriptor) [pid 8070] close(22) = -1 EBADF (Bad file descriptor) [pid 8070] close(23) = -1 EBADF (Bad file descriptor) [pid 8070] close(24) = -1 EBADF (Bad file descriptor) [pid 8070] close(25) = -1 EBADF (Bad file descriptor) [pid 8070] close(26) = -1 EBADF (Bad file descriptor) [pid 8070] close(27) = -1 EBADF (Bad file descriptor) [pid 8070] close(28) = -1 EBADF (Bad file descriptor) [pid 8070] close(29) = -1 EBADF (Bad file descriptor) [pid 8070] exit_group(0 [pid 8089] <... futex resumed>) = ? [pid 8071] <... futex resumed>) = ? [pid 8089] +++ exited with 0 +++ [pid 8070] <... exit_group resumed>) = ? [pid 8071] +++ exited with 0 +++ [pid 8070] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=450, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./149/binderfs") = 0 [pid 5073] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./149/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./149") = 0 [pid 5073] mkdir("./150", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8090 attached , child_tidptr=0x5555570a9690) = 453 [pid 8090] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8090] chdir("./150") = 0 [pid 8090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8090] setpgid(0, 0) = 0 [pid 8090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8090] write(3, "1000", 4) = 4 [pid 8090] close(3) = 0 [pid 8090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8090] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8090] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8091 attached => {parent_tid=[454]}, 88) = 454 [pid 8091] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 8090] rt_sigprocmask(SIG_SETMASK, [], [pid 8091] <... rseq resumed>) = 0 [pid 8090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8091] set_robust_list(0x7f8785c4c9a0, 24 [pid 8090] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8091] <... set_robust_list resumed>) = 0 [pid 8090] <... futex resumed>) = 0 [pid 8091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8090] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8091] memfd_create("syzkaller", 0) = 3 [pid 8091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8091] munmap(0x7f877d82c000, 138412032) = 0 [pid 8091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8091] close(3) = 0 [pid 8091] mkdir("./file0", 0777) = 0 [ 250.165650][ T8091] loop0: detected capacity change from 0 to 32768 [ 250.190272][ T8091] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8091) [ 250.206266][ T8091] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 250.215541][ T8091] BTRFS info (device loop0): force clearing of disk cache [ 250.222636][ T8091] BTRFS info (device loop0): setting nodatasum [ 250.229046][ T8091] BTRFS info (device loop0): allowing degraded mounts [ 250.235870][ T8091] BTRFS info (device loop0): enabling disk space caching [ 250.242883][ T8091] BTRFS info (device loop0): disk space caching is enabled [ 250.264836][ T8091] BTRFS info (device loop0): enabling ssd optimizations [ 250.271796][ T8091] BTRFS info (device loop0): auto enabling async discard [ 250.279880][ T8091] BTRFS info (device loop0): rebuilding free space tree [ 250.291565][ T8091] BTRFS info (device loop0): disabling free space tree [ 250.298665][ T8091] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8091] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8091] chdir("./file0") = 0 [pid 8091] ioctl(4, LOOP_CLR_FD) = 0 [pid 8091] close(4) = 0 [pid 8091] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8090] <... futex resumed>) = 0 [pid 8090] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8091] open("./file0", O_RDONLY [pid 8090] <... futex resumed>) = 0 [pid 8091] <... open resumed>) = 4 [pid 8090] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8091] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8090] <... futex resumed>) = 0 [pid 8091] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8090] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8090] <... futex resumed>) = 0 [pid 8091] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [ 250.308332][ T8091] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 250.321528][ T8091] BTRFS info (device loop0): checking UUID tree [pid 8090] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8091] <... ioctl resumed>) = 0 [pid 8091] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8090] <... futex resumed>) = 0 [pid 8091] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8090] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8090] <... futex resumed>) = 0 [pid 8091] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8090] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8090] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8090] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 8109 attached => {parent_tid=[455]}, 88) = 455 [pid 8109] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 8090] rt_sigprocmask(SIG_SETMASK, [], [pid 8109] <... rseq resumed>) = 0 [pid 8090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8109] set_robust_list(0x7f8785c2b9a0, 24 [pid 8090] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8109] <... set_robust_list resumed>) = 0 [pid 8090] <... futex resumed>) = 0 [pid 8109] rt_sigprocmask(SIG_SETMASK, [], [pid 8090] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8109] open("./file0", O_RDONLY) = 5 [pid 8109] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8090] <... futex resumed>) = 0 [pid 8090] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8109] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 8090] <... futex resumed>) = 0 [ 250.386216][ T8091] BTRFS info (device loop0): balance: start -d -m [ 250.395647][ T8091] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 250.418688][ T8091] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8090] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8109] <... ioctl resumed>) = 0 [pid 8109] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 250.600870][ T8091] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 250.625378][ T8091] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8109] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8091] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8091] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8091] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8090] close(3) = 0 [pid 8090] close(4) = 0 [pid 8090] close(5) = 0 [ 250.644689][ T8091] BTRFS info (device loop0): balance: ended with status: 0 [pid 8090] close(6) = -1 EBADF (Bad file descriptor) [pid 8090] close(7) = -1 EBADF (Bad file descriptor) [pid 8090] close(8) = -1 EBADF (Bad file descriptor) [pid 8090] close(9) = -1 EBADF (Bad file descriptor) [pid 8090] close(10) = -1 EBADF (Bad file descriptor) [pid 8090] close(11) = -1 EBADF (Bad file descriptor) [pid 8090] close(12) = -1 EBADF (Bad file descriptor) [pid 8090] close(13) = -1 EBADF (Bad file descriptor) [pid 8090] close(14) = -1 EBADF (Bad file descriptor) [pid 8090] close(15) = -1 EBADF (Bad file descriptor) [pid 8090] close(16) = -1 EBADF (Bad file descriptor) [pid 8090] close(17) = -1 EBADF (Bad file descriptor) [pid 8090] close(18) = -1 EBADF (Bad file descriptor) [pid 8090] close(19) = -1 EBADF (Bad file descriptor) [pid 8090] close(20) = -1 EBADF (Bad file descriptor) [pid 8090] close(21) = -1 EBADF (Bad file descriptor) [pid 8090] close(22) = -1 EBADF (Bad file descriptor) [pid 8090] close(23) = -1 EBADF (Bad file descriptor) [pid 8090] close(24) = -1 EBADF (Bad file descriptor) [pid 8090] close(25) = -1 EBADF (Bad file descriptor) [pid 8090] close(26) = -1 EBADF (Bad file descriptor) [pid 8090] close(27) = -1 EBADF (Bad file descriptor) [pid 8090] close(28) = -1 EBADF (Bad file descriptor) [pid 8090] close(29) = -1 EBADF (Bad file descriptor) [pid 8090] exit_group(0) = ? [pid 8109] <... futex resumed>) = ? [pid 8091] <... futex resumed>) = ? [pid 8109] +++ exited with 0 +++ [pid 8091] +++ exited with 0 +++ [pid 8090] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=453, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=37 /* 0.37 s */} --- [pid 5073] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./150/binderfs") = 0 [pid 5073] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./150/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./150") = 0 [pid 5073] mkdir("./151", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8110 attached [pid 8110] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 456 [pid 8110] <... set_robust_list resumed>) = 0 [pid 8110] chdir("./151") = 0 [pid 8110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8110] setpgid(0, 0) = 0 [pid 8110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8110] write(3, "1000", 4) = 4 [pid 8110] close(3) = 0 [pid 8110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8110] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8110] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8111 attached [pid 8111] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 8110] <... clone3 resumed> => {parent_tid=[457]}, 88) = 457 [pid 8111] <... rseq resumed>) = 0 [pid 8110] rt_sigprocmask(SIG_SETMASK, [], [pid 8111] set_robust_list(0x7f8785c4c9a0, 24 [pid 8110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8111] <... set_robust_list resumed>) = 0 [pid 8110] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8110] <... futex resumed>) = 0 [pid 8111] memfd_create("syzkaller", 0 [pid 8110] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8111] <... memfd_create resumed>) = 3 [pid 8111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8111] munmap(0x7f877d82c000, 138412032) = 0 [pid 8111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8111] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8111] close(3) = 0 [pid 8111] mkdir("./file0", 0777) = 0 [ 251.162298][ T8111] loop0: detected capacity change from 0 to 32768 [ 251.182198][ T8111] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8111) [ 251.198522][ T8111] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 251.207890][ T8111] BTRFS info (device loop0): force clearing of disk cache [ 251.215108][ T8111] BTRFS info (device loop0): setting nodatasum [ 251.221271][ T8111] BTRFS info (device loop0): allowing degraded mounts [ 251.228334][ T8111] BTRFS info (device loop0): enabling disk space caching [ 251.235400][ T8111] BTRFS info (device loop0): disk space caching is enabled [ 251.257578][ T8111] BTRFS info (device loop0): enabling ssd optimizations [ 251.264582][ T8111] BTRFS info (device loop0): auto enabling async discard [ 251.272491][ T8111] BTRFS info (device loop0): rebuilding free space tree [ 251.284994][ T8111] BTRFS info (device loop0): disabling free space tree [ 251.291885][ T8111] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.301573][ T8111] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 8111] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8111] chdir("./file0") = 0 [pid 8111] ioctl(4, LOOP_CLR_FD) = 0 [pid 8111] close(4) = 0 [pid 8111] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8110] <... futex resumed>) = 0 [pid 8111] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8110] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8111] open("./file0", O_RDONLY [pid 8110] <... futex resumed>) = 0 [pid 8111] <... open resumed>) = 4 [pid 8110] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8111] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8110] <... futex resumed>) = 0 [pid 8111] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8110] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8110] <... futex resumed>) = 0 [pid 8111] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8110] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8111] <... ioctl resumed>) = 0 [pid 8111] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8110] <... futex resumed>) = 0 [pid 8111] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8110] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8110] <... futex resumed>) = 0 [pid 8111] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 251.315655][ T8111] BTRFS info (device loop0): checking UUID tree [pid 8110] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8110] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8110] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 8129 attached [pid 8129] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 8110] <... clone3 resumed> => {parent_tid=[458]}, 88) = 458 [pid 8129] <... rseq resumed>) = 0 [pid 8129] set_robust_list(0x7f8785c2b9a0, 24 [pid 8110] rt_sigprocmask(SIG_SETMASK, [], [pid 8129] <... set_robust_list resumed>) = 0 [pid 8129] rt_sigprocmask(SIG_SETMASK, [], [pid 8110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8129] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8110] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8110] <... futex resumed>) = 0 [pid 8129] open("./file0", O_RDONLY [pid 8110] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8129] <... open resumed>) = 5 [pid 8129] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8110] <... futex resumed>) = 0 [pid 8129] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8110] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8110] <... futex resumed>) = 0 [pid 8129] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 251.370386][ T8111] BTRFS info (device loop0): balance: start -d -m [ 251.379435][ T8111] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 251.406956][ T8111] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8110] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8129] <... ioctl resumed>) = 0 [pid 8129] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 251.586817][ T8111] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 251.611717][ T8111] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8129] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8111] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8111] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8111] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8110] close(3) = 0 [pid 8110] close(4) = 0 [pid 8110] close(5) = 0 [pid 8110] close(6) = -1 EBADF (Bad file descriptor) [pid 8110] close(7) = -1 EBADF (Bad file descriptor) [pid 8110] close(8) = -1 EBADF (Bad file descriptor) [pid 8110] close(9) = -1 EBADF (Bad file descriptor) [pid 8110] close(10) = -1 EBADF (Bad file descriptor) [pid 8110] close(11) = -1 EBADF (Bad file descriptor) [pid 8110] close(12) = -1 EBADF (Bad file descriptor) [ 251.630746][ T8111] BTRFS info (device loop0): balance: ended with status: 0 [pid 8110] close(13) = -1 EBADF (Bad file descriptor) [pid 8110] close(14) = -1 EBADF (Bad file descriptor) [pid 8110] close(15) = -1 EBADF (Bad file descriptor) [pid 8110] close(16) = -1 EBADF (Bad file descriptor) [pid 8110] close(17) = -1 EBADF (Bad file descriptor) [pid 8110] close(18) = -1 EBADF (Bad file descriptor) [pid 8110] close(19) = -1 EBADF (Bad file descriptor) [pid 8110] close(20) = -1 EBADF (Bad file descriptor) [pid 8110] close(21) = -1 EBADF (Bad file descriptor) [pid 8110] close(22) = -1 EBADF (Bad file descriptor) [pid 8110] close(23) = -1 EBADF (Bad file descriptor) [pid 8110] close(24) = -1 EBADF (Bad file descriptor) [pid 8110] close(25) = -1 EBADF (Bad file descriptor) [pid 8110] close(26) = -1 EBADF (Bad file descriptor) [pid 8110] close(27) = -1 EBADF (Bad file descriptor) [pid 8110] close(28) = -1 EBADF (Bad file descriptor) [pid 8110] close(29) = -1 EBADF (Bad file descriptor) [pid 8110] exit_group(0 [pid 8129] <... futex resumed>) = ? [pid 8111] <... futex resumed>) = ? [pid 8110] <... exit_group resumed>) = ? [pid 8129] +++ exited with 0 +++ [pid 8111] +++ exited with 0 +++ [pid 8110] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- [pid 5073] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./151/binderfs") = 0 [pid 5073] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./151/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./151") = 0 [pid 5073] mkdir("./152", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8130 attached , child_tidptr=0x5555570a9690) = 459 [pid 8130] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8130] chdir("./152") = 0 [pid 8130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8130] setpgid(0, 0) = 0 [pid 8130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8130] write(3, "1000", 4) = 4 [pid 8130] close(3) = 0 [pid 8130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8130] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8130] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8131 attached [pid 8131] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 8130] <... clone3 resumed> => {parent_tid=[460]}, 88) = 460 [pid 8131] set_robust_list(0x7f8785c4c9a0, 24 [pid 8130] rt_sigprocmask(SIG_SETMASK, [], [pid 8131] <... set_robust_list resumed>) = 0 [pid 8130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8131] rt_sigprocmask(SIG_SETMASK, [], [pid 8130] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8131] memfd_create("syzkaller", 0 [pid 8130] <... futex resumed>) = 0 [pid 8130] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8131] <... memfd_create resumed>) = 3 [pid 8131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8131] munmap(0x7f877d82c000, 138412032) = 0 [pid 8131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8131] close(3) = 0 [pid 8131] mkdir("./file0", 0777) = 0 [ 252.302147][ T8131] loop0: detected capacity change from 0 to 32768 [ 252.317054][ T8131] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8131) [ 252.332810][ T8131] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 252.342112][ T8131] BTRFS info (device loop0): force clearing of disk cache [ 252.349347][ T8131] BTRFS info (device loop0): setting nodatasum [ 252.355576][ T8131] BTRFS info (device loop0): allowing degraded mounts [ 252.362332][ T8131] BTRFS info (device loop0): enabling disk space caching [ 252.369401][ T8131] BTRFS info (device loop0): disk space caching is enabled [ 252.390679][ T8131] BTRFS info (device loop0): enabling ssd optimizations [ 252.397786][ T8131] BTRFS info (device loop0): auto enabling async discard [ 252.405996][ T8131] BTRFS info (device loop0): rebuilding free space tree [ 252.417874][ T8131] BTRFS info (device loop0): disabling free space tree [ 252.424840][ T8131] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.434805][ T8131] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 8131] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8131] chdir("./file0") = 0 [pid 8131] ioctl(4, LOOP_CLR_FD) = 0 [pid 8131] close(4) = 0 [pid 8131] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8130] <... futex resumed>) = 0 [pid 8130] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8131] open("./file0", O_RDONLY [pid 8130] <... futex resumed>) = 0 [pid 8131] <... open resumed>) = 4 [ 252.448665][ T8131] BTRFS info (device loop0): checking UUID tree [pid 8130] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8131] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8130] <... futex resumed>) = 0 [pid 8131] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8130] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8130] <... futex resumed>) = 0 [pid 8131] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8130] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8131] <... ioctl resumed>) = 0 [pid 8131] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8130] <... futex resumed>) = 0 [pid 8131] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8130] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8130] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8130] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8130] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[461]}, 88) = 461 [pid 8130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 8149 attached [pid 8130] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8149] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 8130] <... futex resumed>) = 0 [pid 8149] <... rseq resumed>) = 0 [pid 8130] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8149] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8149] open("./file0", O_RDONLY) = 5 [ 252.510164][ T8131] BTRFS info (device loop0): balance: start -d -m [ 252.519207][ T8131] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 252.545456][ T8131] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8149] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8130] <... futex resumed>) = 0 [pid 8130] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8149] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 8130] <... futex resumed>) = 0 [pid 8130] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 252.664258][ T8131] BTRFS info (device loop0): found 9 extents, stage: move data extents [pid 8149] <... ioctl resumed>) = 0 [pid 8149] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8149] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8131] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8131] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8131] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8130] close(3) = 0 [pid 8130] close(4) = 0 [pid 8130] close(5) = 0 [pid 8130] close(6) = -1 EBADF (Bad file descriptor) [pid 8130] close(7) = -1 EBADF (Bad file descriptor) [pid 8130] close(8) = -1 EBADF (Bad file descriptor) [pid 8130] close(9) = -1 EBADF (Bad file descriptor) [pid 8130] close(10) = -1 EBADF (Bad file descriptor) [pid 8130] close(11) = -1 EBADF (Bad file descriptor) [pid 8130] close(12) = -1 EBADF (Bad file descriptor) [pid 8130] close(13) = -1 EBADF (Bad file descriptor) [pid 8130] close(14) = -1 EBADF (Bad file descriptor) [pid 8130] close(15) = -1 EBADF (Bad file descriptor) [pid 8130] close(16) = -1 EBADF (Bad file descriptor) [pid 8130] close(17) = -1 EBADF (Bad file descriptor) [pid 8130] close(18) = -1 EBADF (Bad file descriptor) [pid 8130] close(19) = -1 EBADF (Bad file descriptor) [pid 8130] close(20) = -1 EBADF (Bad file descriptor) [pid 8130] close(21) = -1 EBADF (Bad file descriptor) [pid 8130] close(22) = -1 EBADF (Bad file descriptor) [pid 8130] close(23) = -1 EBADF (Bad file descriptor) [pid 8130] close(24) = -1 EBADF (Bad file descriptor) [ 252.742598][ T8131] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 252.762405][ T8131] BTRFS info (device loop0): balance: ended with status: 0 [pid 8130] close(25) = -1 EBADF (Bad file descriptor) [pid 8130] close(26) = -1 EBADF (Bad file descriptor) [pid 8130] close(27) = -1 EBADF (Bad file descriptor) [pid 8130] close(28) = -1 EBADF (Bad file descriptor) [pid 8130] close(29) = -1 EBADF (Bad file descriptor) [pid 8130] exit_group(0 [pid 8149] <... futex resumed>) = ? [pid 8130] <... exit_group resumed>) = ? [pid 8149] +++ exited with 0 +++ [pid 8131] <... futex resumed>) = ? [pid 8131] +++ exited with 0 +++ [pid 8130] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=459, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5073] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./152/binderfs") = 0 [pid 5073] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./152/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./152") = 0 [pid 5073] mkdir("./153", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8150 attached , child_tidptr=0x5555570a9690) = 462 [pid 8150] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8150] chdir("./153") = 0 [pid 8150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8150] setpgid(0, 0) = 0 [pid 8150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8150] write(3, "1000", 4) = 4 [pid 8150] close(3) = 0 [pid 8150] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8150] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8150] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8150] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8151 attached [pid 8151] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 8150] <... clone3 resumed> => {parent_tid=[463]}, 88) = 463 [pid 8151] <... rseq resumed>) = 0 [pid 8150] rt_sigprocmask(SIG_SETMASK, [], [pid 8151] set_robust_list(0x7f8785c4c9a0, 24 [pid 8150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8151] <... set_robust_list resumed>) = 0 [pid 8150] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8151] rt_sigprocmask(SIG_SETMASK, [], [pid 8150] <... futex resumed>) = 0 [pid 8151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8150] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8151] memfd_create("syzkaller", 0) = 3 [pid 8151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8151] munmap(0x7f877d82c000, 138412032) = 0 [pid 8151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8151] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8151] close(3) = 0 [pid 8151] mkdir("./file0", 0777) = 0 [ 253.353355][ T8151] loop0: detected capacity change from 0 to 32768 [ 253.379373][ T8151] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8151) [ 253.395452][ T8151] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 253.404729][ T8151] BTRFS info (device loop0): force clearing of disk cache [ 253.411826][ T8151] BTRFS info (device loop0): setting nodatasum [ 253.418064][ T8151] BTRFS info (device loop0): allowing degraded mounts [ 253.424929][ T8151] BTRFS info (device loop0): enabling disk space caching [ 253.431965][ T8151] BTRFS info (device loop0): disk space caching is enabled [ 253.453576][ T8151] BTRFS info (device loop0): enabling ssd optimizations [ 253.460668][ T8151] BTRFS info (device loop0): auto enabling async discard [ 253.469298][ T8151] BTRFS info (device loop0): rebuilding free space tree [ 253.481099][ T8151] BTRFS info (device loop0): disabling free space tree [ 253.488028][ T8151] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8151] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8151] chdir("./file0") = 0 [pid 8151] ioctl(4, LOOP_CLR_FD) = 0 [pid 8151] close(4) = 0 [pid 8151] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8150] <... futex resumed>) = 0 [pid 8151] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8150] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8150] <... futex resumed>) = 0 [pid 8151] open("./file0", O_RDONLY [pid 8150] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8151] <... open resumed>) = 4 [pid 8151] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8150] <... futex resumed>) = 0 [pid 8151] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 8150] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8151] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8150] <... futex resumed>) = 0 [pid 8151] <... ioctl resumed>) = 0 [ 253.497698][ T8151] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 253.511260][ T8151] BTRFS info (device loop0): checking UUID tree [pid 8150] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8151] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8150] <... futex resumed>) = 0 [pid 8151] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8150] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8150] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8150] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8150] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8150] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[464]}, 88) = 464 [pid 8150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8150] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8150] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8169 attached [pid 8169] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8169] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8169] open("./file0", O_RDONLY) = 5 [pid 8169] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8150] <... futex resumed>) = 0 [pid 8169] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8150] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8150] <... futex resumed>) = 0 [pid 8169] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 253.572712][ T8151] BTRFS info (device loop0): balance: start -d -m [ 253.584534][ T8151] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 253.609156][ T8151] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8150] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8169] <... ioctl resumed>) = 0 [pid 8169] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 253.769909][ T8151] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 253.793531][ T8151] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8169] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8151] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8151] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8151] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8150] close(3) = 0 [pid 8150] close(4) = 0 [pid 8150] close(5) = 0 [pid 8150] close(6) = -1 EBADF (Bad file descriptor) [pid 8150] close(7) = -1 EBADF (Bad file descriptor) [pid 8150] close(8) = -1 EBADF (Bad file descriptor) [pid 8150] close(9) = -1 EBADF (Bad file descriptor) [pid 8150] close(10) = -1 EBADF (Bad file descriptor) [pid 8150] close(11) = -1 EBADF (Bad file descriptor) [ 253.813240][ T8151] BTRFS info (device loop0): balance: ended with status: 0 [pid 8150] close(12) = -1 EBADF (Bad file descriptor) [pid 8150] close(13) = -1 EBADF (Bad file descriptor) [pid 8150] close(14) = -1 EBADF (Bad file descriptor) [pid 8150] close(15) = -1 EBADF (Bad file descriptor) [pid 8150] close(16) = -1 EBADF (Bad file descriptor) [pid 8150] close(17) = -1 EBADF (Bad file descriptor) [pid 8150] close(18) = -1 EBADF (Bad file descriptor) [pid 8150] close(19) = -1 EBADF (Bad file descriptor) [pid 8150] close(20) = -1 EBADF (Bad file descriptor) [pid 8150] close(21) = -1 EBADF (Bad file descriptor) [pid 8150] close(22) = -1 EBADF (Bad file descriptor) [pid 8150] close(23) = -1 EBADF (Bad file descriptor) [pid 8150] close(24) = -1 EBADF (Bad file descriptor) [pid 8150] close(25) = -1 EBADF (Bad file descriptor) [pid 8150] close(26) = -1 EBADF (Bad file descriptor) [pid 8150] close(27) = -1 EBADF (Bad file descriptor) [pid 8150] close(28) = -1 EBADF (Bad file descriptor) [pid 8150] close(29) = -1 EBADF (Bad file descriptor) [pid 8150] exit_group(0 [pid 8169] <... futex resumed>) = ? [pid 8151] <... futex resumed>) = ? [pid 8150] <... exit_group resumed>) = ? [pid 8169] +++ exited with 0 +++ [pid 8151] +++ exited with 0 +++ [pid 8150] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=462, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./153/binderfs") = 0 [pid 5073] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./153/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./153") = 0 [pid 5073] mkdir("./154", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8170 attached [pid 8170] set_robust_list(0x5555570a96a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 465 [pid 8170] <... set_robust_list resumed>) = 0 [pid 8170] chdir("./154") = 0 [pid 8170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8170] setpgid(0, 0) = 0 [pid 8170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8170] write(3, "1000", 4) = 4 [pid 8170] close(3) = 0 [pid 8170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8170] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8170] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8171 attached [pid 8171] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053) = 0 [pid 8170] <... clone3 resumed> => {parent_tid=[466]}, 88) = 466 [pid 8171] set_robust_list(0x7f8785c4c9a0, 24 [pid 8170] rt_sigprocmask(SIG_SETMASK, [], [pid 8171] <... set_robust_list resumed>) = 0 [pid 8171] rt_sigprocmask(SIG_SETMASK, [], [pid 8170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8170] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8171] memfd_create("syzkaller", 0 [pid 8170] <... futex resumed>) = 0 [pid 8170] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8171] <... memfd_create resumed>) = 3 [pid 8171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8171] munmap(0x7f877d82c000, 138412032) = 0 [pid 8171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8171] close(3) = 0 [pid 8171] mkdir("./file0", 0777) = 0 [ 254.469352][ T8171] loop0: detected capacity change from 0 to 32768 [ 254.489162][ T8171] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8171) [ 254.504858][ T8171] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 254.514116][ T8171] BTRFS info (device loop0): force clearing of disk cache [ 254.521212][ T8171] BTRFS info (device loop0): setting nodatasum [ 254.527750][ T8171] BTRFS info (device loop0): allowing degraded mounts [ 254.534839][ T8171] BTRFS info (device loop0): enabling disk space caching [ 254.541867][ T8171] BTRFS info (device loop0): disk space caching is enabled [ 254.563044][ T8171] BTRFS info (device loop0): enabling ssd optimizations [ 254.570084][ T8171] BTRFS info (device loop0): auto enabling async discard [ 254.578321][ T8171] BTRFS info (device loop0): rebuilding free space tree [ 254.590983][ T8171] BTRFS info (device loop0): disabling free space tree [ 254.597938][ T8171] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 254.607635][ T8171] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [pid 8171] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8171] chdir("./file0") = 0 [pid 8171] ioctl(4, LOOP_CLR_FD) = 0 [pid 8171] close(4) = 0 [pid 8171] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... futex resumed>) = 0 [pid 8171] <... futex resumed>) = 1 [pid 8170] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8171] open("./file0", O_RDONLY [pid 8170] <... futex resumed>) = 0 [pid 8171] <... open resumed>) = 4 [pid 8170] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8171] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 8170] <... futex resumed>) = 0 [pid 8170] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8171] <... futex resumed>) = 1 [pid 8170] <... futex resumed>) = 0 [pid 8171] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8170] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8171] <... ioctl resumed>) = 0 [pid 8171] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8170] <... futex resumed>) = 0 [pid 8171] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8170] <... futex resumed>) = 0 [pid 8171] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 254.620575][ T8171] BTRFS info (device loop0): checking UUID tree [ 254.654131][ T8171] BTRFS info (device loop0): balance: start -d -m [pid 8170] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8170] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8170] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0}./strace-static-x86_64: Process 8189 attached [pid 8189] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8189] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8189] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] <... clone3 resumed> => {parent_tid=[467]}, 88) = 467 [pid 8170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8170] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8189] <... futex resumed>) = 0 [pid 8170] <... futex resumed>) = 1 [pid 8170] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8189] open("./file0", O_RDONLY) = 5 [pid 8189] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8170] <... futex resumed>) = 0 [pid 8189] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8170] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8189] <... futex resumed>) = 0 [ 254.662569][ T8171] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 254.688276][ T8171] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8189] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [pid 8170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8189] <... ioctl resumed>) = 0 [pid 8189] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 254.868341][ T8171] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 254.893206][ T8171] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8189] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8171] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8171] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8171] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8170] close(3) = 0 [pid 8170] close(4) = 0 [pid 8170] close(5) = 0 [pid 8170] close(6) = -1 EBADF (Bad file descriptor) [pid 8170] close(7) = -1 EBADF (Bad file descriptor) [ 254.912759][ T8171] BTRFS info (device loop0): balance: ended with status: 0 [pid 8170] close(8) = -1 EBADF (Bad file descriptor) [pid 8170] close(9) = -1 EBADF (Bad file descriptor) [pid 8170] close(10) = -1 EBADF (Bad file descriptor) [pid 8170] close(11) = -1 EBADF (Bad file descriptor) [pid 8170] close(12) = -1 EBADF (Bad file descriptor) [pid 8170] close(13) = -1 EBADF (Bad file descriptor) [pid 8170] close(14) = -1 EBADF (Bad file descriptor) [pid 8170] close(15) = -1 EBADF (Bad file descriptor) [pid 8170] close(16) = -1 EBADF (Bad file descriptor) [pid 8170] close(17) = -1 EBADF (Bad file descriptor) [pid 8170] close(18) = -1 EBADF (Bad file descriptor) [pid 8170] close(19) = -1 EBADF (Bad file descriptor) [pid 8170] close(20) = -1 EBADF (Bad file descriptor) [pid 8170] close(21) = -1 EBADF (Bad file descriptor) [pid 8170] close(22) = -1 EBADF (Bad file descriptor) [pid 8170] close(23) = -1 EBADF (Bad file descriptor) [pid 8170] close(24) = -1 EBADF (Bad file descriptor) [pid 8170] close(25) = -1 EBADF (Bad file descriptor) [pid 8170] close(26) = -1 EBADF (Bad file descriptor) [pid 8170] close(27) = -1 EBADF (Bad file descriptor) [pid 8170] close(28) = -1 EBADF (Bad file descriptor) [pid 8170] close(29) = -1 EBADF (Bad file descriptor) [pid 8170] exit_group(0 [pid 8189] <... futex resumed>) = ? [pid 8170] <... exit_group resumed>) = ? [pid 8189] +++ exited with 0 +++ [pid 8171] <... futex resumed>) = ? [pid 8171] +++ exited with 0 +++ [pid 8170] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=465, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./154/binderfs") = 0 [pid 5073] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./154/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./154") = 0 [pid 5073] mkdir("./155", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8190 attached [pid 8190] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8190] chdir("./155" [pid 5073] <... clone resumed>, child_tidptr=0x5555570a9690) = 468 [pid 8190] <... chdir resumed>) = 0 [pid 8190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8190] setpgid(0, 0) = 0 [pid 8190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8190] write(3, "1000", 4) = 4 [pid 8190] close(3) = 0 [pid 8190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8190] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8190] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8191 attached [pid 8191] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 8190] <... clone3 resumed> => {parent_tid=[469]}, 88) = 469 [pid 8191] <... rseq resumed>) = 0 [pid 8190] rt_sigprocmask(SIG_SETMASK, [], [pid 8191] set_robust_list(0x7f8785c4c9a0, 24 [pid 8190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8191] <... set_robust_list resumed>) = 0 [pid 8190] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] rt_sigprocmask(SIG_SETMASK, [], [pid 8190] <... futex resumed>) = 0 [pid 8191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8190] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8191] memfd_create("syzkaller", 0) = 3 [pid 8191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8191] munmap(0x7f877d82c000, 138412032) = 0 [pid 8191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8191] close(3) = 0 [pid 8191] mkdir("./file0", 0777) = 0 [ 255.507334][ T8191] loop0: detected capacity change from 0 to 32768 [ 255.531090][ T8191] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8191) [ 255.546701][ T8191] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 255.555956][ T8191] BTRFS info (device loop0): force clearing of disk cache [ 255.563050][ T8191] BTRFS info (device loop0): setting nodatasum [ 255.569260][ T8191] BTRFS info (device loop0): allowing degraded mounts [ 255.576243][ T8191] BTRFS info (device loop0): enabling disk space caching [ 255.583264][ T8191] BTRFS info (device loop0): disk space caching is enabled [ 255.605540][ T8191] BTRFS info (device loop0): enabling ssd optimizations [ 255.612689][ T8191] BTRFS info (device loop0): auto enabling async discard [ 255.621254][ T8191] BTRFS info (device loop0): rebuilding free space tree [ 255.633024][ T8191] BTRFS info (device loop0): disabling free space tree [ 255.639982][ T8191] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8191] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8191] chdir("./file0") = 0 [pid 8191] ioctl(4, LOOP_CLR_FD) = 0 [pid 8191] close(4) = 0 [pid 8191] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8191] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8190] <... futex resumed>) = 0 [pid 8190] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 255.649662][ T8191] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.662979][ T8191] BTRFS info (device loop0): checking UUID tree [pid 8190] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8191] <... futex resumed>) = 0 [pid 8191] open("./file0", O_RDONLY) = 4 [pid 8191] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8191] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8190] <... futex resumed>) = 0 [pid 8190] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] <... futex resumed>) = 0 [pid 8190] <... futex resumed>) = 1 [pid 8191] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8190] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8191] <... ioctl resumed>) = 0 [pid 8191] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8190] <... futex resumed>) = 0 [pid 8190] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8191] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8190] <... futex resumed>) = 0 [ 255.757017][ T8191] BTRFS info (device loop0): balance: start -d -m [ 255.770090][ T8191] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 8190] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8190] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8190] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[470]}, 88) = 470 [pid 8190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8190] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8190] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 8209 attached [pid 8209] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053) = 0 [pid 8209] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8209] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8209] open("./file0", O_RDONLY) = 5 [pid 8209] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8190] <... futex resumed>) = 0 [pid 8209] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8190] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8190] <... futex resumed>) = 0 [pid 8209] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 255.799523][ T8191] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [pid 8190] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 8209] <... ioctl resumed>) = 0 [pid 8209] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 255.927544][ T8191] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 255.952786][ T8191] BTRFS info (device loop0): found 1 extents, stage: update data pointers [pid 8209] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8191] <... ioctl resumed> => {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, state=0, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 8191] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8191] futex(0x7f878651e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8190] close(3) = 0 [pid 8190] close(4) = 0 [pid 8190] close(5) = 0 [pid 8190] close(6) = -1 EBADF (Bad file descriptor) [pid 8190] close(7) = -1 EBADF (Bad file descriptor) [pid 8190] close(8) = -1 EBADF (Bad file descriptor) [pid 8190] close(9) = -1 EBADF (Bad file descriptor) [pid 8190] close(10) = -1 EBADF (Bad file descriptor) [pid 8190] close(11) = -1 EBADF (Bad file descriptor) [ 255.970909][ T8191] BTRFS info (device loop0): balance: ended with status: 0 [pid 8190] close(12) = -1 EBADF (Bad file descriptor) [pid 8190] close(13) = -1 EBADF (Bad file descriptor) [pid 8190] close(14) = -1 EBADF (Bad file descriptor) [pid 8190] close(15) = -1 EBADF (Bad file descriptor) [pid 8190] close(16) = -1 EBADF (Bad file descriptor) [pid 8190] close(17) = -1 EBADF (Bad file descriptor) [pid 8190] close(18) = -1 EBADF (Bad file descriptor) [pid 8190] close(19) = -1 EBADF (Bad file descriptor) [pid 8190] close(20) = -1 EBADF (Bad file descriptor) [pid 8190] close(21) = -1 EBADF (Bad file descriptor) [pid 8190] close(22) = -1 EBADF (Bad file descriptor) [pid 8190] close(23) = -1 EBADF (Bad file descriptor) [pid 8190] close(24) = -1 EBADF (Bad file descriptor) [pid 8190] close(25) = -1 EBADF (Bad file descriptor) [pid 8190] close(26) = -1 EBADF (Bad file descriptor) [pid 8190] close(27) = -1 EBADF (Bad file descriptor) [pid 8190] close(28) = -1 EBADF (Bad file descriptor) [pid 8190] close(29) = -1 EBADF (Bad file descriptor) [pid 8190] exit_group(0 [pid 8191] <... futex resumed>) = ? [pid 8209] <... futex resumed>) = ? [pid 8209] +++ exited with 0 +++ [pid 8191] +++ exited with 0 +++ [pid 8190] <... exit_group resumed>) = ? [pid 8190] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=468, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- [pid 5073] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./155/binderfs") = 0 [pid 5073] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5073] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555570b2890 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555570b2890 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./155/file0") = 0 [pid 5073] getdents64(3, 0x5555570aa850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./155") = 0 [pid 5073] mkdir("./156", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8210 attached , child_tidptr=0x5555570a9690) = 471 [pid 8210] set_robust_list(0x5555570a96a0, 24) = 0 [pid 8210] chdir("./156") = 0 [pid 8210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8210] setpgid(0, 0) = 0 [pid 8210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8210] write(3, "1000", 4) = 4 [pid 8210] close(3) = 0 [pid 8210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8210] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c2c000 [pid 8210] mprotect(0x7f8785c2d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8210] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c4c990, parent_tid=0x7f8785c4c990, exit_signal=0, stack=0x7f8785c2c000, stack_size=0x20300, tls=0x7f8785c4c6c0}./strace-static-x86_64: Process 8211 attached [pid 8211] rseq(0x7f8785c4cfe0, 0x20, 0, 0x53053053 [pid 8210] <... clone3 resumed> => {parent_tid=[472]}, 88) = 472 [pid 8211] <... rseq resumed>) = 0 [pid 8210] rt_sigprocmask(SIG_SETMASK, [], [pid 8211] set_robust_list(0x7f8785c4c9a0, 24 [pid 8210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8211] <... set_robust_list resumed>) = 0 [pid 8210] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8211] rt_sigprocmask(SIG_SETMASK, [], [pid 8210] <... futex resumed>) = 0 [pid 8211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 8210] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 8211] memfd_create("syzkaller", 0) = 3 [pid 8211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f877d82c000 [pid 8211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 8211] munmap(0x7f877d82c000, 138412032) = 0 [pid 8211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 8211] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8211] close(3) = 0 [pid 8211] mkdir("./file0", 0777) = 0 [ 256.479369][ T8211] loop0: detected capacity change from 0 to 32768 [ 256.505972][ T8211] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor397 (8211) [ 256.522993][ T8211] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 256.532278][ T8211] BTRFS info (device loop0): force clearing of disk cache [ 256.539412][ T8211] BTRFS info (device loop0): setting nodatasum [ 256.545615][ T8211] BTRFS info (device loop0): allowing degraded mounts [ 256.552384][ T8211] BTRFS info (device loop0): enabling disk space caching [ 256.559428][ T8211] BTRFS info (device loop0): disk space caching is enabled [ 256.580594][ T8211] BTRFS info (device loop0): enabling ssd optimizations [ 256.587729][ T8211] BTRFS info (device loop0): auto enabling async discard [ 256.596698][ T8211] BTRFS info (device loop0): rebuilding free space tree [ 256.609065][ T8211] BTRFS info (device loop0): disabling free space tree [ 256.615996][ T8211] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [pid 8211] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan_uuid_tree,degraded,space_cache=v1,") = 0 [pid 8211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8211] chdir("./file0") = 0 [pid 8211] ioctl(4, LOOP_CLR_FD) = 0 [pid 8211] close(4) = 0 [pid 8211] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8210] <... futex resumed>) = 0 [ 256.625681][ T8211] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 256.639319][ T8211] BTRFS info (device loop0): checking UUID tree [pid 8210] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8211] open("./file0", O_RDONLY [pid 8210] <... futex resumed>) = 0 [pid 8211] <... open resumed>) = 4 [pid 8210] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8211] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8210] <... futex resumed>) = 0 [pid 8210] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8211] ioctl(4, BTRFS_IOC_GET_SUBVOL_INFO, 0x20001840 [pid 8210] <... futex resumed>) = 0 [pid 8211] <... ioctl resumed>) = 0 [pid 8210] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8211] futex(0x7f878651e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 8210] <... futex resumed>) = 0 [pid 8210] futex(0x7f878651e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8210] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8211] <... futex resumed>) = 1 [pid 8211] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_DATA|BTRFS_BALANCE_METADATA, data={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}, meta={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 8210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 8210] futex(0x7f878651e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 8210] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 8210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8785c0b000 [pid 8210] mprotect(0x7f8785c0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 8210] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 8210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8785c2b990, parent_tid=0x7f8785c2b990, exit_signal=0, stack=0x7f8785c0b000, stack_size=0x20300, tls=0x7f8785c2b6c0} => {parent_tid=[473]}, 88) = 473 [pid 8210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8210] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 8229 attached ) = 0 [pid 8229] rseq(0x7f8785c2bfe0, 0x20, 0, 0x53053053 [pid 8210] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 8229] <... rseq resumed>) = 0 [pid 8229] set_robust_list(0x7f8785c2b9a0, 24) = 0 [pid 8229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 8229] open("./file0", O_RDONLY) = 5 [pid 8229] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 8210] <... futex resumed>) = 0 [pid 8229] futex(0x7f878651e6f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 8210] futex(0x7f878651e6f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 8229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 8210] <... futex resumed>) = 0 [pid 8229] ioctl(5, FITRIM, {start=0, len=2885681152, minlen=0} [ 256.745991][ T8211] BTRFS info (device loop0): balance: start -d -m [ 256.757335][ T8211] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [pid 8210] futex(0x7f878651e6fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 256.829868][ T8211] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 256.843729][ T2451] BTRFS warning (device loop0): Skipping commit of aborted transaction. [ 256.853598][ T2451] ------------[ cut here ]------------ [ 256.859152][ T2451] BTRFS: Transaction aborted (error -28) [ 256.866254][ T2451] WARNING: CPU: 0 PID: 2451 at fs/btrfs/transaction.c:2057 btrfs_commit_transaction+0x2eb8/0x3b20 [pid 8229] <... ioctl resumed>) = 0 [pid 8229] futex(0x7f878651e6fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 256.877091][ T2451] Modules linked in: [ 256.880997][ T2451] CPU: 0 PID: 2451 Comm: kworker/u4:9 Not tainted 6.6.0-rc7-next-20231027-syzkaller #0 [ 256.890710][ T2451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 256.900813][ T2451] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 256.908445][ T2451] RIP: 0010:btrfs_commit_transaction+0x2eb8/0x3b20 [ 256.915148][ T2451] Code: fe 48 8b 7c 24 18 be 01 00 00 00 e8 22 49 e7 00 e9 cb f5 ff ff e8 68 36 0d fe 8b 74 24 18 48 c7 c7 60 ef 16 8b e8 88 b6 d2 fd <0f> 0b e9 91 f6 ff ff e8 4c 36 0d fe f0 83 44 24 fc 00 49 8d bc 24 [ 256.935084][ T2451] RSP: 0018:ffffc90009dcf958 EFLAGS: 00010282 [ 256.941175][ T2451] RAX: 0000000000000000 RBX: ffff88807c691000 RCX: ffffffff814e7eb9 [ 256.949192][ T2451] RDX: ffff888025963b80 RSI: ffffffff814e7ec6 RDI: 0000000000000001 [ 256.957236][ T2451] RBP: ffff888028904000 R08: 0000000000000001 R09: 0000000000000000 [ 256.965247][ T2451] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 256.973224][ T2451] R13: ffff888074ca2470 R14: ffff888074ca2618 R15: ffff888028904000 [ 256.981232][ T2451] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 256.990188][ T2451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.996803][ T2451] CR2: 00007f87864cd750 CR3: 0000000028c07000 CR4: 00000000003506f0 [ 257.004801][ T2451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.012766][ T2451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.020782][ T2451] Call Trace: [ 257.024106][ T2451] [ 257.027028][ T2451] ? show_regs+0x8e/0xa0 [ 257.031334][ T2451] ? __warn+0xe5/0x380 [ 257.035482][ T2451] ? preempt_schedule_notrace+0x5e/0xe0 [ 257.041085][ T2451] ? btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.047024][ T2451] ? report_bug+0x3bc/0x580 [ 257.051575][ T2451] ? handle_bug+0x3c/0x70 [ 257.055959][ T2451] ? exc_invalid_op+0x17/0x40 [ 257.060659][ T2451] ? asm_exc_invalid_op+0x1a/0x20 [ 257.065793][ T2451] ? __warn_printk+0x199/0x350 [ 257.070573][ T2451] ? __warn_printk+0x1a6/0x350 [ 257.075391][ T2451] ? btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.081313][ T2451] ? btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.087279][ T2451] ? create_pending_snapshots+0x2d0/0x2d0 [ 257.093025][ T2451] ? start_transaction+0x29a/0x1c80 [ 257.098310][ T2451] flush_space+0x1fa/0xd90 [ 257.102749][ T2451] ? find_held_lock+0x2d/0x110 [ 257.107573][ T2451] ? btrfs_space_info_update_bytes_may_use+0x420/0x420 [ 257.114461][ T2451] ? reacquire_held_locks+0x4b0/0x4b0 [ 257.119838][ T2451] ? btrfs_get_alloc_profile+0x2da/0x850 [ 257.125508][ T2451] ? btrfs_bg_type_to_factor+0x3c/0xa0 [ 257.131060][ T2451] btrfs_async_reclaim_metadata_space+0x51c/0xa90 [ 257.137557][ T2451] process_one_work+0x8a2/0x15e0 [ 257.142519][ T2451] ? lock_sync+0x180/0x180 [ 257.146990][ T2451] ? init_worker_pool+0x770/0x770 [ 257.152036][ T2451] ? assign_work+0x1a0/0x240 [ 257.156671][ T2451] worker_thread+0x8b6/0x1280 [ 257.161373][ T2451] ? __kthread_parkme+0x148/0x220 [ 257.166431][ T2451] ? process_one_work+0x15e0/0x15e0 [ 257.171644][ T2451] kthread+0x337/0x440 [ 257.175743][ T2451] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.180999][ T2451] ? kthread_complete_and_exit+0x40/0x40 [ 257.186664][ T2451] ret_from_fork+0x45/0x80 [ 257.191094][ T2451] ? kthread_complete_and_exit+0x40/0x40 [ 257.196778][ T2451] ret_from_fork_asm+0x11/0x20 [ 257.201604][ T2451] [ 257.204650][ T2451] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.211914][ T2451] CPU: 0 PID: 2451 Comm: kworker/u4:9 Not tainted 6.6.0-rc7-next-20231027-syzkaller #0 [ 257.221531][ T2451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 257.231572][ T2451] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 257.239112][ T2451] Call Trace: [ 257.242387][ T2451] [ 257.245307][ T2451] dump_stack_lvl+0xd9/0x1b0 [ 257.249889][ T2451] panic+0x6dc/0x790 [ 257.253789][ T2451] ? panic_smp_self_stop+0xa0/0xa0 [ 257.258892][ T2451] ? show_trace_log_lvl+0x363/0x4f0 [ 257.264097][ T2451] ? check_panic_on_warn+0x1f/0xb0 [ 257.269200][ T2451] ? btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.275087][ T2451] check_panic_on_warn+0xab/0xb0 [ 257.280017][ T2451] __warn+0xf1/0x380 [ 257.283946][ T2451] ? preempt_schedule_notrace+0x5e/0xe0 [ 257.289512][ T2451] ? btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.295418][ T2451] report_bug+0x3bc/0x580 [ 257.299738][ T2451] handle_bug+0x3c/0x70 [ 257.303892][ T2451] exc_invalid_op+0x17/0x40 [ 257.308407][ T2451] asm_exc_invalid_op+0x1a/0x20 [ 257.313270][ T2451] RIP: 0010:btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.319783][ T2451] Code: fe 48 8b 7c 24 18 be 01 00 00 00 e8 22 49 e7 00 e9 cb f5 ff ff e8 68 36 0d fe 8b 74 24 18 48 c7 c7 60 ef 16 8b e8 88 b6 d2 fd <0f> 0b e9 91 f6 ff ff e8 4c 36 0d fe f0 83 44 24 fc 00 49 8d bc 24 [ 257.339391][ T2451] RSP: 0018:ffffc90009dcf958 EFLAGS: 00010282 [ 257.345459][ T2451] RAX: 0000000000000000 RBX: ffff88807c691000 RCX: ffffffff814e7eb9 [ 257.353428][ T2451] RDX: ffff888025963b80 RSI: ffffffff814e7ec6 RDI: 0000000000000001 [ 257.361397][ T2451] RBP: ffff888028904000 R08: 0000000000000001 R09: 0000000000000000 [ 257.369365][ T2451] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 257.377331][ T2451] R13: ffff888074ca2470 R14: ffff888074ca2618 R15: ffff888028904000 [ 257.385310][ T2451] ? __warn_printk+0x199/0x350 [ 257.390077][ T2451] ? __warn_printk+0x1a6/0x350 [ 257.394852][ T2451] ? btrfs_commit_transaction+0x2eb8/0x3b20 [ 257.400770][ T2451] ? create_pending_snapshots+0x2d0/0x2d0 [ 257.406492][ T2451] ? start_transaction+0x29a/0x1c80 [ 257.411710][ T2451] flush_space+0x1fa/0xd90 [ 257.416139][ T2451] ? find_held_lock+0x2d/0x110 [ 257.420912][ T2451] ? btrfs_space_info_update_bytes_may_use+0x420/0x420 [ 257.427776][ T2451] ? reacquire_held_locks+0x4b0/0x4b0 [ 257.433157][ T2451] ? btrfs_get_alloc_profile+0x2da/0x850 [ 257.438802][ T2451] ? btrfs_bg_type_to_factor+0x3c/0xa0 [ 257.444275][ T2451] btrfs_async_reclaim_metadata_space+0x51c/0xa90 [ 257.450714][ T2451] process_one_work+0x8a2/0x15e0 [ 257.455666][ T2451] ? lock_sync+0x180/0x180 [ 257.460087][ T2451] ? init_worker_pool+0x770/0x770 [ 257.465126][ T2451] ? assign_work+0x1a0/0x240 [ 257.469728][ T2451] worker_thread+0x8b6/0x1280 [ 257.474422][ T2451] ? __kthread_parkme+0x148/0x220 [ 257.479450][ T2451] ? process_one_work+0x15e0/0x15e0 [ 257.484651][ T2451] kthread+0x337/0x440 [ 257.488720][ T2451] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.493917][ T2451] ? kthread_complete_and_exit+0x40/0x40 [ 257.499557][ T2451] ret_from_fork+0x45/0x80 [ 257.503979][ T2451] ? kthread_complete_and_exit+0x40/0x40 [ 257.509616][ T2451] ret_from_fork_asm+0x11/0x20 [ 257.514401][ T2451] [ 257.517584][ T2451] Kernel Offset: disabled [ 257.521985][ T2451] Rebooting in 86400 seconds..