./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2434515377

<...>
Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts.
execve("./syz-executor2434515377", ["./syz-executor2434515377"], 0x7ffc01bb4e10 /* 10 vars */) = 0
brk(NULL)                               = 0x5555556eb000
brk(0x5555556ebd00)                     = 0x5555556ebd00
arch_prctl(ARCH_SET_FS, 0x5555556eb380) = 0
set_tid_address(0x5555556eb650)         = 5039
set_robust_list(0x5555556eb660, 24)     = 0
rseq(0x5555556ebca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2434515377", 4096) = 28
getrandom("\x7b\x49\x28\x85\x42\x5a\x9d\x8a", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555556ebd00
brk(0x55555570cd00)                     = 0x55555570cd00
brk(0x55555570d000)                     = 0x55555570d000
mprotect(0x7fc50e0ed000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556eb650) = 5040
./strace-static-x86_64: Process 5040 attached
[pid  5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5040] set_robust_list(0x5555556eb660, 24) = 0
[pid  5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5041 attached
 <unfinished ...>
[pid  5039] <... clone resumed>, child_tidptr=0x5555556eb650) = 5041
[pid  5041] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5040] <... openat resumed>)       = 3
[pid  5041] <... set_robust_list resumed>) = 0
[pid  5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5040] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5041] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5042 attached
) = 3
[pid  5040] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5042] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5041] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5039] <... clone resumed>, child_tidptr=0x5555556eb650) = 5042
[pid  5042] <... set_robust_list resumed>) = 0
[pid  5040] close(3)                    = 0
[pid  5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5042] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5041] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
./strace-static-x86_64: Process 5043 attached
[pid  5041] close(3)                    = 0
./strace-static-x86_64: Process 5044 attached
[pid  5043] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5039] <... clone resumed>, child_tidptr=0x5555556eb650) = 5044
[pid  5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5043] <... set_robust_list resumed>) = 0
[pid  5044] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5043] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5044] <... set_robust_list resumed>) = 0
./strace-static-x86_64: Process 5045 attached
[pid  5044] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5043] <... prctl resumed>)        = 0
[pid  5042] <... openat resumed>)       = 3
[pid  5041] <... clone resumed>, child_tidptr=0x5555556eb650) = 5045
[pid  5040] <... clone resumed>, child_tidptr=0x5555556eb650) = 5043
[pid  5045] set_robust_list(0x5555556eb660, 24./strace-static-x86_64: Process 5046 attached
) = 0
[pid  5043] setpgid(0, 0 <unfinished ...>
[pid  5046] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5043] <... setpgid resumed>)      = 0
[pid  5046] <... set_robust_list resumed>) = 0
[pid  5046] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5045] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5042] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5045] <... prctl resumed>)        = 0
[pid  5045] setpgid(0, 0 <unfinished ...>
[pid  5042] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5039] <... clone resumed>, child_tidptr=0x5555556eb650) = 5046
[pid  5046] <... openat resumed>)       = 3
[pid  5044] <... openat resumed>)       = 3
[pid  5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5046] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5047 attached
 <unfinished ...>
[pid  5047] set_robust_list(0x5555556eb660, 24) = 0
[pid  5047] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5046] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5046] close(3)                    = 0
[pid  5046] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5039] <... clone resumed>, child_tidptr=0x5555556eb650) = 5047
[pid  5045] <... setpgid resumed>)      = 0
[pid  5044] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5043] <... openat resumed>)       = 3
[pid  5042] close(3./strace-static-x86_64: Process 5048 attached
 <unfinished ...>
[pid  5047] <... openat resumed>)       = 3
[pid  5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5044] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5043] write(3, "1000", 4 <unfinished ...>
[pid  5042] <... close resumed>)        = 0
[pid  5048] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5044] close(3 <unfinished ...>
[pid  5043] <... write resumed>)        = 4
[pid  5042] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5043] close(3 <unfinished ...>
[pid  5048] <... set_robust_list resumed>) = 0
[pid  5047] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5043] <... close resumed>)        = 0
[pid  5048] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5047] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5048] <... prctl resumed>)        = 0
[pid  5047] close(3 <unfinished ...>
[pid  5046] <... clone resumed>, child_tidptr=0x5555556eb650) = 5048
[pid  5043] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5049 attached
 <unfinished ...>
[pid  5048] setpgid(0, 0 <unfinished ...>
[pid  5047] <... close resumed>)        = 0
[pid  5045] <... openat resumed>)       = 3
[pid  5044] <... close resumed>)        = 0
[pid  5048] <... setpgid resumed>)      = 0
[pid  5047] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5050 attached
) = 3
[pid  5050] set_robust_list(0x5555556eb660, 24) = 0
[pid  5048] write(3, "1000", 4)         = 4
[pid  5048] close(3 <unfinished ...>
[pid  5050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5048] <... close resumed>)        = 0
[pid  5047] <... clone resumed>, child_tidptr=0x5555556eb650) = 5050
[pid  5050] setpgid(0, 0 <unfinished ...>
[pid  5048] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5050] <... setpgid resumed>)      = 0
[pid  5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5048] <... memfd_create resumed>) = 3
[pid  5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc505c36000
[pid  5050] <... openat resumed>)       = 3
[pid  5049] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5045] write(3, "1000", 4 <unfinished ...>
[pid  5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5042] <... clone resumed>, child_tidptr=0x5555556eb650) = 5049
[pid  5045] <... write resumed>)        = 4
[pid  5045] close(3 <unfinished ...>
[pid  5050] write(3, "1000", 4)         = 4
[pid  5050] close(3)                    = 0
[pid  5049] <... set_robust_list resumed>) = 0
[pid  5045] <... close resumed>)        = 0
[pid  5050] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5044] <... clone resumed>, child_tidptr=0x5555556eb650) = 5052
[pid  5050] <... memfd_create resumed>) = 3
[pid  5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc505c36000
[pid  5045] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5045] <... memfd_create resumed>) = 3
./strace-static-x86_64: Process 5052 attached
[pid  5049] setpgid(0, 0 <unfinished ...>
[pid  5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5043] <... memfd_create resumed>) = 3
[pid  5052] set_robust_list(0x5555556eb660, 24 <unfinished ...>
[pid  5049] <... setpgid resumed>)      = 0
[pid  5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5052] <... set_robust_list resumed>) = 0
[pid  5045] <... mmap resumed>)         = 0x7fc505c36000
[pid  5052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5052] setpgid(0, 0)               = 0
[pid  5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5052] write(3, "1000", 4)         = 4
[pid  5052] close(3)                    = 0
[pid  5052] memfd_create("syzkaller", 0) = 3
[pid  5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5052] <... mmap resumed>)         = 0x7fc505c36000
[pid  5049] <... openat resumed>)       = 3
[pid  5043] <... mmap resumed>)         = 0x7fc505c36000
[pid  5049] write(3, "1000", 4)         = 4
[pid  5049] close(3)                    = 0
[pid  5049] memfd_create("syzkaller", 0) = 3
[pid  5049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc505c36000
[   43.075358][ T5043] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5043 'syz-executor243'
[pid  5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5049] <... write resumed>)        = 16777216
[pid  5045] <... write resumed>)        = 16777216
[pid  5049] munmap(0x7fc505c36000, 16777216 <unfinished ...>
[pid  5048] <... write resumed>)        = 16777216
[pid  5045] munmap(0x7fc505c36000, 16777216 <unfinished ...>
[pid  5043] <... write resumed>)        = 16777216
[pid  5043] munmap(0x7fc505c36000, 16777216 <unfinished ...>
[pid  5048] munmap(0x7fc505c36000, 16777216 <unfinished ...>
[pid  5050] <... write resumed>)        = 16777216
[pid  5050] munmap(0x7fc505c36000, 16777216 <unfinished ...>
[pid  5048] <... munmap resumed>)       = 0
[pid  5048] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5052] <... write resumed>)        = 16777216
[pid  5050] <... munmap resumed>)       = 0
[pid  5049] <... munmap resumed>)       = 0
[pid  5048] <... openat resumed>)       = 4
[pid  5045] <... munmap resumed>)       = 0
[pid  5043] <... munmap resumed>)       = 0
[pid  5052] munmap(0x7fc505c36000, 16777216 <unfinished ...>
[pid  5050] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5049] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5048] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5050] <... openat resumed>)       = 4
[pid  5052] <... munmap resumed>)       = 0
[pid  5043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5043] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5052] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5050] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5049] <... openat resumed>)       = 4
[pid  5048] <... ioctl resumed>)        = 0
[pid  5045] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5052] <... openat resumed>)       = 4
[pid  5043] <... ioctl resumed>)        = 0
[pid  5043] close(3)                    = 0
[pid  5043] mkdir("./file0", 0777)      = 0
[pid  5043] mount("/dev/loop0", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan\t" <unfinished ...>
[pid  5049] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5048] close(3 <unfinished ...>
[pid  5052] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5050] <... ioctl resumed>)        = 0
[pid  5045] <... openat resumed>)       = 4
[pid  5049] <... ioctl resumed>)        = 0
[pid  5048] <... close resumed>)        = 0
[pid  5049] close(3 <unfinished ...>
[pid  5048] mkdir("./file0", 0777 <unfinished ...>
[pid  5049] <... close resumed>)        = 0
[pid  5048] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5049] mkdir("./file0", 0777 <unfinished ...>
[pid  5048] mount("/dev/loop4", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan\t" <unfinished ...>
[pid  5049] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5049] mount("/dev/loop2", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan\t" <unfinished ...>
[pid  5045] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5052] <... ioctl resumed>)        = 0
[pid  5052] close(3)                    = 0
[pid  5052] mkdir("./file0", 0777)      = -1 EEXIST (File exists)
[   43.726093][ T5048] loop4: detected capacity change from 0 to 32768
[   43.731302][ T5043] loop0: detected capacity change from 0 to 32768
[   43.734371][ T5050] loop5: detected capacity change from 0 to 32768
[   43.742514][ T5049] loop2: detected capacity change from 0 to 32768
[   43.746893][ T5052] loop3: detected capacity change from 0 to 32768
[   43.758470][ T5043] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor243 (5043)
[pid  5052] mount("/dev/loop3", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan\t" <unfinished ...>
[pid  5050] close(3)                    = 0
[pid  5045] <... ioctl resumed>)        = 0
[pid  5050] mkdir("./file0", 0777 <unfinished ...>
[pid  5045] close(3 <unfinished ...>
[pid  5050] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid  5045] <... close resumed>)        = 0
[pid  5050] mount("/dev/loop5", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan\t" <unfinished ...>
[pid  5045] mkdir("./file0", 0777)      = -1 EEXIST (File exists)
[pid  5050] <... mount resumed>)        = -1 EEXIST (File exists)
[pid  5050] ioctl(4, LOOP_CLR_FD <unfinished ...>
[   43.771636][ T5045] loop1: detected capacity change from 0 to 32768
[   43.782439][ T5043] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   43.792517][ T5043] BTRFS info (device loop3): force clearing of disk cache
[   43.793414][ T5050] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor243 (5050)
[   43.800035][ T5043] BTRFS info (device loop3): setting nodatasum
[   43.817795][ T5043] BTRFS error (device loop3): unrecognized mount option 'rescan	'
[pid  5045] mount("/dev/loop1", "./file0", "btrfs", MS_NOEXEC|MS_STRICTATIME, "datacow,clear_cache,nodatasum,rescan\t") = -1 EEXIST (File exists)
[   43.818242][ T5045] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor243 (5045)
[   43.836689][ T5043] BTRFS error (device loop3): open_ctree failed
[   43.843755][ T5048] ==================================================================
[   43.851823][ T5048] BUG: KASAN: slab-use-after-free in btrfs_open_devices+0xb8/0xc0
[   43.859629][ T5048] Read of size 4 at addr ffff8880293c8d30 by task syz-executor243/5048
[   43.867848][ T5048] 
[   43.870159][ T5048] CPU: 0 PID: 5048 Comm: syz-executor243 Not tainted 6.5.0-rc5-next-20230807-syzkaller #0
[   43.880025][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[   43.890070][ T5048] Call Trace:
[   43.893339][ T5048]  <TASK>
[   43.896287][ T5048]  dump_stack_lvl+0xd9/0x1b0
[   43.900881][ T5048]  print_report+0xc4/0x620
[   43.905301][ T5048]  ? __virt_addr_valid+0x5e/0x2d0
[   43.910328][ T5048]  ? __phys_addr+0xc6/0x140
[   43.914826][ T5048]  kasan_report+0xda/0x110
[   43.919245][ T5048]  ? btrfs_open_devices+0xb8/0xc0
[   43.924265][ T5048]  ? btrfs_open_devices+0xb8/0xc0
[   43.929284][ T5048]  btrfs_open_devices+0xb8/0xc0
[   43.934134][ T5048]  btrfs_mount_root+0x681/0xda0
[   43.938984][ T5048]  ? btrfs_sync_fs+0x770/0x770
[   43.943742][ T5048]  ? legacy_parse_param+0x3d4/0x8e0
[   43.948943][ T5048]  ? bpf_lsm_fs_context_parse_param+0x9/0x10
[   43.954929][ T5048]  ? security_fs_context_parse_param+0xa7/0xd0
[   43.961074][ T5048]  ? generic_parse_monolithic+0x1f0/0x1f0
[   43.966795][ T5048]  ? vfs_parse_fs_string+0xfb/0x150
[   43.972005][ T5048]  ? vfs_parse_fs_param+0x3c0/0x3c0
[   43.977214][ T5048]  ? kasan_set_track+0x25/0x30
[   43.981997][ T5048]  ? btrfs_sync_fs+0x770/0x770
[   43.986774][ T5048]  legacy_get_tree+0x109/0x220
[   43.991550][ T5048]  vfs_get_tree+0x88/0x350
[   43.995975][ T5048]  vfs_kern_mount.part.0+0xcb/0x170
[   44.001174][ T5048]  vfs_kern_mount+0x3f/0x60
[   44.005676][ T5048]  btrfs_mount+0x292/0xb10
[   44.010087][ T5048]  ? btrfs_show_options+0x1230/0x1230
[   44.015459][ T5048]  ? vfs_parse_fs_param_source+0x103/0x1e0
[   44.021265][ T5048]  ? legacy_parse_param+0x3d4/0x8e0
[   44.026462][ T5048]  ? bpf_lsm_fs_context_parse_param+0x9/0x10
[   44.032435][ T5048]  ? security_fs_context_parse_param+0xa7/0xd0
[   44.038580][ T5048]  ? generic_parse_monolithic+0x1f0/0x1f0
[   44.044309][ T5048]  ? vfs_parse_fs_string+0xfb/0x150
[   44.049508][ T5048]  ? apparmor_capable+0x1da/0x4e0
[   44.054531][ T5048]  ? btrfs_show_options+0x1230/0x1230
[   44.059895][ T5048]  legacy_get_tree+0x109/0x220
[   44.064663][ T5048]  vfs_get_tree+0x88/0x350
[   44.069075][ T5048]  path_mount+0x1492/0x1ed0
[   44.073582][ T5048]  ? kmem_cache_free+0xf0/0x490
[   44.078432][ T5048]  ? finish_automount+0xa50/0xa50
[   44.083454][ T5048]  ? putname+0x101/0x140
[   44.087691][ T5048]  __x64_sys_mount+0x293/0x310
[   44.092450][ T5048]  ? copy_mnt_ns+0xb60/0xb60
[   44.097036][ T5048]  ? _raw_spin_unlock_irq+0x2e/0x50
[   44.102229][ T5048]  ? ptrace_notify+0xf4/0x130
[   44.106901][ T5048]  do_syscall_64+0x38/0xb0
[   44.111319][ T5048]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   44.117223][ T5048] RIP: 0033:0x7fc50e075e9a
[   44.121631][ T5048] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   44.141230][ T5048] RSP: 002b:00007ffd2e2532d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[   44.149637][ T5048] RAX: ffffffffffffffda RBX: 00007ffd2e2532f0 RCX: 00007fc50e075e9a
[   44.157603][ T5048] RDX: 00000000200051c0 RSI: 0000000020005200 RDI: 00007ffd2e2532f0
[   44.165568][ T5048] RBP: 0000000000000004 R08: 00007ffd2e253330 R09: 00000000000051a5
[   44.173539][ T5048] R10: 0000000001000008 R11: 0000000000000282 R12: 0000000001000008
[   44.181503][ T5048] R13: 00007ffd2e253330 R14: 0000000000000003 R15: 0000000001000000
[   44.189469][ T5048]  </TASK>
[   44.192478][ T5048] 
[   44.194785][ T5048] Allocated by task 5043:
[   44.199097][ T5048]  kasan_save_stack+0x33/0x50
[   44.203775][ T5048]  kasan_set_track+0x25/0x30
[   44.208395][ T5048]  __kasan_kmalloc+0xa2/0xb0
[   44.212981][ T5048]  alloc_fs_devices+0x54/0x2b0
[   44.217737][ T5048]  device_list_add.constprop.0+0x3eb/0x1db0
[   44.223624][ T5048]  btrfs_scan_one_device+0x1b7/0x2a0
[   44.228905][ T5048]  btrfs_mount_root+0x4a8/0xda0
[   44.233747][ T5048]  legacy_get_tree+0x109/0x220
[   44.238506][ T5048]  vfs_get_tree+0x88/0x350
[   44.242918][ T5048]  vfs_kern_mount.part.0+0xcb/0x170
[   44.248109][ T5048]  vfs_kern_mount+0x3f/0x60
[   44.252602][ T5048]  btrfs_mount+0x292/0xb10
[   44.257012][ T5048]  legacy_get_tree+0x109/0x220
[   44.261774][ T5048]  vfs_get_tree+0x88/0x350
[   44.266185][ T5048]  path_mount+0x1492/0x1ed0
[   44.270684][ T5048]  __x64_sys_mount+0x293/0x310
[   44.275442][ T5048]  do_syscall_64+0x38/0xb0
[   44.279853][ T5048]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   44.285743][ T5048] 
[   44.288059][ T5048] Freed by task 5043:
[   44.292026][ T5048]  kasan_save_stack+0x33/0x50
[   44.296701][ T5048]  kasan_set_track+0x25/0x30
[   44.301289][ T5048]  kasan_save_free_info+0x2b/0x40
[   44.306303][ T5048]  ____kasan_slab_free+0x15e/0x1b0
[   44.311413][ T5048]  slab_free_freelist_hook+0x114/0x1e0
[   44.316863][ T5048]  __kmem_cache_free+0xb8/0x2f0
[   44.321708][ T5048]  btrfs_close_devices+0x4cd/0x610
[   44.326812][ T5048]  open_ctree+0x1c1/0x5710
[   44.331222][ T5048]  btrfs_mount_root+0x976/0xda0
[   44.336062][ T5048]  legacy_get_tree+0x109/0x220
[   44.340829][ T5048]  vfs_get_tree+0x88/0x350
[   44.345242][ T5048]  vfs_kern_mount.part.0+0xcb/0x170
[   44.350433][ T5048]  vfs_kern_mount+0x3f/0x60
[   44.354927][ T5048]  btrfs_mount+0x292/0xb10
[   44.359332][ T5048]  legacy_get_tree+0x109/0x220
[   44.364092][ T5048]  vfs_get_tree+0x88/0x350
[   44.368499][ T5048]  path_mount+0x1492/0x1ed0
[   44.372993][ T5048]  __x64_sys_mount+0x293/0x310
[   44.377749][ T5048]  do_syscall_64+0x38/0xb0
[   44.382161][ T5048]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   44.388050][ T5048] 
[   44.390362][ T5048] The buggy address belongs to the object at ffff8880293c8c00
[   44.390362][ T5048]  which belongs to the cache kmalloc-512 of size 512
[   44.404402][ T5048] The buggy address is located 304 bytes inside of
[   44.404402][ T5048]  freed 512-byte region [ffff8880293c8c00, ffff8880293c8e00)
[   44.418184][ T5048] 
[   44.420492][ T5048] The buggy address belongs to the physical page:
[   44.426888][ T5048] page:ffffea0000a4f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293c8
[   44.437025][ T5048] head:ffffea0000a4f200 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   44.445949][ T5048] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   44.453918][ T5048] page_type: 0xffffffff()
[   44.458238][ T5048] raw: 00fff00000010200 ffff888012841c80 ffffea00008f2d00 dead000000000002
[   44.466815][ T5048] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   44.475378][ T5048] page dumped because: kasan: bad access detected
[   44.481773][ T5048] page_owner tracks the page as allocated
[   44.487469][ T5048] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4147, tgid 4147 (kworker/u4:3), ts 10970429937, free_ts 0
[   44.507948][ T5048]  post_alloc_hook+0x2d2/0x350
[   44.512710][ T5048]  get_page_from_freelist+0x10d7/0x31b0
[   44.518252][ T5048]  __alloc_pages+0x1d0/0x4a0
[   44.522843][ T5048]  alloc_pages+0x1a9/0x270
[   44.527255][ T5048]  allocate_slab+0x24e/0x380
[   44.531838][ T5048]  ___slab_alloc+0x8bc/0x1570
[   44.536507][ T5048]  __slab_alloc.constprop.0+0x56/0xa0
[   44.541876][ T5048]  __kmem_cache_alloc_node+0x137/0x350
[   44.547331][ T5048]  kmalloc_trace+0x25/0xe0
[   44.551744][ T5048]  alloc_bprm+0x51/0xaf0
[   44.555974][ T5048]  kernel_execve+0xaf/0x4e0
[   44.560464][ T5048]  call_usermodehelper_exec_async+0x256/0x4c0
[   44.566522][ T5048]  ret_from_fork+0x2c/0x70
[   44.570935][ T5048]  ret_from_fork_asm+0x11/0x20
[   44.575698][ T5048] page_owner free stack trace missing
[   44.581050][ T5048] 
[   44.583361][ T5048] Memory state around the buggy address:
[   44.588971][ T5048]  ffff8880293c8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   44.597019][ T5048]  ffff8880293c8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   44.605068][ T5048] >ffff8880293c8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   44.613116][ T5048]                                      ^
[   44.618730][ T5048]  ffff8880293c8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[pid  5045] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid  5043] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[   44.626779][ T5048]  ffff8880293c8e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   44.634825][ T5048] ==================================================================
[   44.643317][ T5048] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   44.650512][ T5048] CPU: 1 PID: 5048 Comm: syz-executor243 Not tainted 6.5.0-rc5-next-20230807-syzkaller #0
[   44.660397][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[   44.670440][ T5048] Call Trace:
[   44.673710][ T5048]  <TASK>
[   44.676629][ T5048]  dump_stack_lvl+0xd9/0x1b0
[   44.681222][ T5048]  panic+0x6a6/0x750
[   44.685113][ T5048]  ? panic_smp_self_stop+0xa0/0xa0
[   44.690218][ T5048]  ? trace_irq_enable.constprop.0+0xd0/0x100
[   44.696190][ T5048]  ? preempt_schedule_thunk+0x1a/0x30
[   44.701562][ T5048]  ? preempt_schedule_common+0x45/0xc0
[   44.707052][ T5048]  check_panic_on_warn+0xab/0xb0
[   44.711984][ T5048]  end_report+0x108/0x150
[   44.716312][ T5048]  kasan_report+0xea/0x110
[   44.720724][ T5048]  ? btrfs_open_devices+0xb8/0xc0
[   44.725743][ T5048]  ? btrfs_open_devices+0xb8/0xc0
[   44.730761][ T5048]  btrfs_open_devices+0xb8/0xc0
[   44.735605][ T5048]  btrfs_mount_root+0x681/0xda0
[   44.740457][ T5048]  ? btrfs_sync_fs+0x770/0x770
[   44.745213][ T5048]  ? legacy_parse_param+0x3d4/0x8e0
[   44.750409][ T5048]  ? bpf_lsm_fs_context_parse_param+0x9/0x10
[   44.756381][ T5048]  ? security_fs_context_parse_param+0xa7/0xd0
[   44.762533][ T5048]  ? generic_parse_monolithic+0x1f0/0x1f0
[   44.768252][ T5048]  ? vfs_parse_fs_string+0xfb/0x150
[   44.773452][ T5048]  ? vfs_parse_fs_param+0x3c0/0x3c0
[   44.778649][ T5048]  ? kasan_set_track+0x25/0x30
[   44.783410][ T5048]  ? btrfs_sync_fs+0x770/0x770
[   44.788168][ T5048]  legacy_get_tree+0x109/0x220
[   44.792933][ T5048]  vfs_get_tree+0x88/0x350
[   44.797344][ T5048]  vfs_kern_mount.part.0+0xcb/0x170
[   44.802551][ T5048]  vfs_kern_mount+0x3f/0x60
[   44.807071][ T5048]  btrfs_mount+0x292/0xb10
[   44.811499][ T5048]  ? btrfs_show_options+0x1230/0x1230
[   44.816874][ T5048]  ? vfs_parse_fs_param_source+0x103/0x1e0
[   44.822685][ T5048]  ? legacy_parse_param+0x3d4/0x8e0
[   44.827883][ T5048]  ? bpf_lsm_fs_context_parse_param+0x9/0x10
[   44.833857][ T5048]  ? security_fs_context_parse_param+0xa7/0xd0
[   44.840013][ T5048]  ? generic_parse_monolithic+0x1f0/0x1f0
[   44.845735][ T5048]  ? vfs_parse_fs_string+0xfb/0x150
[   44.850935][ T5048]  ? apparmor_capable+0x1da/0x4e0
[   44.855957][ T5048]  ? btrfs_show_options+0x1230/0x1230
[   44.861324][ T5048]  legacy_get_tree+0x109/0x220
[   44.866086][ T5048]  vfs_get_tree+0x88/0x350
[   44.870498][ T5048]  path_mount+0x1492/0x1ed0
[   44.875004][ T5048]  ? kmem_cache_free+0xf0/0x490
[   44.879856][ T5048]  ? finish_automount+0xa50/0xa50
[   44.884884][ T5048]  ? putname+0x101/0x140
[   44.889122][ T5048]  __x64_sys_mount+0x293/0x310
[   44.893886][ T5048]  ? copy_mnt_ns+0xb60/0xb60
[   44.898468][ T5048]  ? _raw_spin_unlock_irq+0x2e/0x50
[   44.903663][ T5048]  ? ptrace_notify+0xf4/0x130
[   44.908333][ T5048]  do_syscall_64+0x38/0xb0
[   44.912745][ T5048]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   44.918637][ T5048] RIP: 0033:0x7fc50e075e9a
[   44.923051][ T5048] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   44.942669][ T5048] RSP: 002b:00007ffd2e2532d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[   44.951084][ T5048] RAX: ffffffffffffffda RBX: 00007ffd2e2532f0 RCX: 00007fc50e075e9a
[   44.959046][ T5048] RDX: 00000000200051c0 RSI: 0000000020005200 RDI: 00007ffd2e2532f0
[   44.967013][ T5048] RBP: 0000000000000004 R08: 00007ffd2e253330 R09: 00000000000051a5
[   44.974972][ T5048] R10: 0000000001000008 R11: 0000000000000282 R12: 0000000001000008
[   44.982932][ T5048] R13: 00007ffd2e253330 R14: 0000000000000003 R15: 0000000001000000
[   44.990904][ T5048]  </TASK>
[   44.994106][ T5048] Kernel Offset: disabled
[   44.998416][ T5048] Rebooting in 86400 seconds..