./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3371352680 <...> Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. execve("./syz-executor3371352680", ["./syz-executor3371352680"], 0x7fff3877b8b0 /* 10 vars */) = 0 brk(NULL) = 0x55558b77b000 brk(0x55558b77be00) = 0x55558b77be00 arch_prctl(ARCH_SET_FS, 0x55558b77b480) = 0 set_tid_address(0x55558b77b750) = 5237 set_robust_list(0x55558b77b760, 24) = 0 rseq(0x55558b77bda0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3371352680", 4096) = 28 getrandom("\x49\xdc\xda\xa9\xb2\x9e\x82\x91", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558b77be00 brk(0x55558b79ce00) = 0x55558b79ce00 brk(0x55558b79d000) = 0x55558b79d000 mprotect(0x7f511f111000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5237}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5237}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5237}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5237}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5237}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5237}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5237}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f511f04fde0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f511f04fde0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5240 attached [pid 5240] set_robust_list(0x55558b77b760, 24 [pid 5237] <... clone resumed>, child_tidptr=0x55558b77b750) = 5240 [pid 5240] <... set_robust_list resumed>) = 0 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] mkdir("./syzkaller.D39JED", 0700./strace-static-x86_64: Process 5241 attached [pid 5237] <... clone resumed>, child_tidptr=0x55558b77b750) = 5241 [pid 5241] set_robust_list(0x55558b77b760, 24 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5241] <... set_robust_list resumed>) = 0 [pid 5241] mkdir("./syzkaller.MACNeO", 0700./strace-static-x86_64: Process 5242 attached [pid 5242] set_robust_list(0x55558b77b760, 24) = 0 [pid 5237] <... clone resumed>, child_tidptr=0x55558b77b750) = 5242 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] mkdir("./syzkaller.9s15ef", 0700 [pid 5241] <... mkdir resumed>) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5242] <... mkdir resumed>) = 0 [pid 5241] chmod("./syzkaller.MACNeO", 0777 [pid 5240] chmod("./syzkaller.D39JED", 0777./strace-static-x86_64: Process 5243 attached [pid 5237] <... clone resumed>, child_tidptr=0x55558b77b750) = 5243 [pid 5242] chmod("./syzkaller.9s15ef", 0777 [pid 5241] <... chmod resumed>) = 0 [pid 5240] <... chmod resumed>) = 0 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] set_robust_list(0x55558b77b760, 24 [pid 5242] <... chmod resumed>) = 0 [pid 5241] chdir("./syzkaller.MACNeO" [pid 5242] chdir("./syzkaller.9s15ef" [pid 5241] <... chdir resumed>) = 0 [pid 5242] <... chdir resumed>) = 0 [pid 5241] mkdir("./0", 0777 [pid 5240] chdir("./syzkaller.D39JED" [pid 5242] mkdir("./0", 0777./strace-static-x86_64: Process 5244 attached [pid 5243] <... set_robust_list resumed>) = 0 [pid 5241] <... mkdir resumed>) = 0 [pid 5240] <... chdir resumed>) = 0 [pid 5237] <... clone resumed>, child_tidptr=0x55558b77b750) = 5244 [pid 5244] set_robust_list(0x55558b77b760, 24) = 0 [pid 5240] mkdir("./0", 0777 [pid 5244] getrandom( [pid 5242] <... mkdir resumed>) = 0 [pid 5244] <... getrandom resumed>"\x54\x63\xb3\xc6\x6d\xe2\x5c\x88", 8, GRND_NONBLOCK) = 8 [pid 5243] mkdir("./syzkaller.BPFtpU", 0700 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5244] mkdir("./syzkaller.6HVqQm", 0700 [pid 5242] <... openat resumed>) = 3 [pid 5241] <... openat resumed>) = 3 [pid 5240] <... mkdir resumed>) = 0 [pid 5243] <... mkdir resumed>) = 0 [pid 5241] ioctl(3, LOOP_CLR_FD [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] close(3 [pid 5244] <... mkdir resumed>) = 0 [pid 5243] chmod("./syzkaller.BPFtpU", 0777 [pid 5242] <... close resumed>) = 0 [pid 5241] close(3 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5243] <... chmod resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5243] chdir("./syzkaller.BPFtpU" [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5243] <... chdir resumed>) = 0 [pid 5243] mkdir("./0", 0777 [pid 5240] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5243] <... mkdir resumed>) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5245 attached [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5244] chmod("./syzkaller.6HVqQm", 0777 [pid 5243] <... openat resumed>) = 3 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5241] <... close resumed>) = 0 [pid 5245] set_robust_list(0x55558b77b760, 24 [pid 5243] ioctl(3, LOOP_CLR_FD [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] <... set_robust_list resumed>) = 0 [pid 5245] chdir("./0" [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 5246 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5245 ./strace-static-x86_64: Process 5247 attached ./strace-static-x86_64: Process 5246 attached [pid 5244] <... chmod resumed>) = 0 [pid 5247] set_robust_list(0x55558b77b760, 24 [pid 5246] set_robust_list(0x55558b77b760, 24 [pid 5244] chdir("./syzkaller.6HVqQm" [pid 5243] close(3 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 5247 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5246] <... set_robust_list resumed>) = 0 [pid 5245] <... chdir resumed>) = 0 [pid 5244] <... chdir resumed>) = 0 [pid 5243] <... close resumed>) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] mkdir("./0", 0777 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5247] chdir("./0" [pid 5246] chdir("./0" [pid 5245] <... prctl resumed>) = 0 [pid 5244] <... mkdir resumed>) = 0 [pid 5247] <... chdir resumed>) = 0 [pid 5246] <... chdir resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5248 attached [pid 5247] <... prctl resumed>) = 0 [pid 5246] <... prctl resumed>) = 0 [pid 5245] setpgid(0, 0 [pid 5244] <... openat resumed>) = 3 [pid 5248] set_robust_list(0x55558b77b760, 24 [pid 5247] setpgid(0, 0 [pid 5246] setpgid(0, 0 [pid 5245] <... setpgid resumed>) = 0 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5248] <... set_robust_list resumed>) = 0 [pid 5247] <... setpgid resumed>) = 0 [pid 5246] <... setpgid resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5248 [pid 5248] chdir("./0" [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] <... openat resumed>) = 3 [pid 5244] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5248] <... chdir resumed>) = 0 [pid 5247] <... openat resumed>) = 3 [pid 5246] <... openat resumed>) = 3 [pid 5245] write(3, "1000", 4 [pid 5244] close(3 [pid 5247] write(3, "1000", 4 [pid 5246] write(3, "1000", 4 [pid 5244] <... close resumed>) = 0 [pid 5247] <... write resumed>) = 4 [pid 5246] <... write resumed>) = 4 [pid 5247] close(3 [pid 5246] close(3 [pid 5247] <... close resumed>) = 0 [pid 5246] <... close resumed>) = 0 [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5245] <... write resumed>) = 4 [pid 5248] <... prctl resumed>) = 0 [pid 5246] <... symlink resumed>) = 0 [pid 5245] close(3 [pid 5248] setpgid(0, 0 [pid 5245] <... close resumed>) = 0 ./strace-static-x86_64: Process 5249 attached [pid 5248] <... setpgid resumed>) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5249] set_robust_list(0x55558b77b760, 24 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5246] write(1, "executing program\n", 18 [pid 5245] <... symlink resumed>) = 0 [pid 5249] <... set_robust_list resumed>) = 0 executing program [pid 5249] chdir("./0" [pid 5248] <... openat resumed>) = 3 [pid 5247] <... symlink resumed>) = 0 [pid 5246] <... write resumed>) = 18 [pid 5245] write(1, "executing program\n", 18executing program [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5249 [pid 5248] write(3, "1000", 4 [pid 5247] write(1, "executing program\n", 18 [pid 5245] <... write resumed>) = 18 [pid 5248] <... write resumed>) = 4 [pid 5245] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] close(3 [pid 5245] <... futex resumed>) = 0 [pid 5248] <... close resumed>) = 0 [pid 5248] symlink("/dev/binderfs", "./binderfs" [pid 5245] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, executing program [pid 5248] <... symlink resumed>) = 0 [pid 5246] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5249] <... chdir resumed>) = 0 [pid 5247] <... write resumed>) = 18 [pid 5246] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5247] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5247] <... futex resumed>) = 0 [pid 5249] <... prctl resumed>) = 0 [pid 5248] write(1, "executing program\n", 18executing program [pid 5247] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5249] setpgid(0, 0 [pid 5248] <... write resumed>) = 18 [pid 5247] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5249] <... setpgid resumed>) = 0 [pid 5248] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5246] <... mmap resumed>) = 0x7f511f01f000 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5248] <... futex resumed>) = 0 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5245] <... mmap resumed>) = 0x7f511f01f000 [pid 5249] <... openat resumed>) = 3 [pid 5248] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] <... mprotect resumed>) = 0 [pid 5245] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5249] write(3, "1000", 4 [pid 5248] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] <... mmap resumed>) = 0x7f511f01f000 [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5245] <... mprotect resumed>) = 0 [pid 5249] <... write resumed>) = 4 [pid 5248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5247] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5246] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5249] close(3 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] <... mprotect resumed>) = 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5250 attached [pid 5249] <... close resumed>) = 0 [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5251 attached [pid 5250] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5249] symlink("/dev/binderfs", "./binderfs" [pid 5248] <... mmap resumed>) = 0x7f511f01f000 [pid 5247] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5246] <... clone3 resumed> => {parent_tid=[5250]}, 88) = 5250 [pid 5251] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 executing program [pid 5250] <... rseq resumed>) = 0 [pid 5249] <... symlink resumed>) = 0 [pid 5248] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5246] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] <... clone3 resumed> => {parent_tid=[5251]}, 88) = 5251 [pid 5251] <... rseq resumed>) = 0 [pid 5250] set_robust_list(0x7f511f03f9a0, 24 [pid 5248] <... mprotect resumed>) = 0 [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] set_robust_list(0x7f511f03f9a0, 24./strace-static-x86_64: Process 5252 attached ) = 0 [pid 5246] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] write(1, "executing program\n", 18 [pid 5252] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], [pid 5249] <... write resumed>) = 18 [pid 5247] <... clone3 resumed> => {parent_tid=[5252]}, 88) = 5252 [pid 5246] <... futex resumed>) = 0 [pid 5250] <... set_robust_list resumed>) = 0 [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] <... rseq resumed>) = 0 [pid 5250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5245] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5252] set_robust_list(0x7f511f03f9a0, 24 [pid 5250] memfd_create("syzkaller", 0 [pid 5249] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5245] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5253 attached [pid 5252] <... set_robust_list resumed>) = 0 [pid 5251] memfd_create("syzkaller", 0 [pid 5250] <... memfd_create resumed>) = 3 [pid 5249] <... futex resumed>) = 0 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] <... memfd_create resumed>) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5249] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5248] <... clone3 resumed> => {parent_tid=[5253]}, 88) = 5253 [pid 5247] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... rseq resumed>) = 0 [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5250] <... mmap resumed>) = 0x7f5116c00000 [pid 5249] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5247] <... futex resumed>) = 0 [pid 5253] set_robust_list(0x7f511f03f9a0, 24 [pid 5252] memfd_create("syzkaller", 0 [pid 5251] <... mmap resumed>) = 0x7f5116c00000 [pid 5249] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5247] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] <... set_robust_list resumed>) = 0 [pid 5249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] <... memfd_create resumed>) = 3 [pid 5248] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5248] <... futex resumed>) = 0 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], [pid 5249] <... mmap resumed>) = 0x7f511f01f000 [pid 5253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5249] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5253] memfd_create("syzkaller", 0 [pid 5248] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] <... mprotect resumed>) = 0 [pid 5249] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5253] <... memfd_create resumed>) = 3 [pid 5249] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5254 attached ) = 0x7f5116c00000 [pid 5254] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5249] <... clone3 resumed> => {parent_tid=[5254]}, 88) = 5254 [pid 5254] <... rseq resumed>) = 0 [pid 5249] rt_sigprocmask(SIG_SETMASK, [], [pid 5254] set_robust_list(0x7f511f03f9a0, 24 [pid 5249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] <... set_robust_list resumed>) = 0 [pid 5249] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], [pid 5249] <... futex resumed>) = 0 [pid 5254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] memfd_create("syzkaller", 0 [pid 5249] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5254] <... memfd_create resumed>) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5253] <... write resumed>) = 16777216 [pid 5253] munmap(0x7f5116c00000, 138412032 [pid 5252] <... write resumed>) = 16777216 [pid 5252] munmap(0x7f5116c00000, 138412032 [pid 5253] <... munmap resumed>) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5252] <... munmap resumed>) = 0 [pid 5251] <... write resumed>) = 16777216 [pid 5250] <... write resumed>) = 16777216 [pid 5252] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5253] <... ioctl resumed>) = 0 [pid 5253] close(3) = 0 [pid 5253] close(4) = 0 [pid 5253] mkdir("./file0", 0777) = 0 [pid 5252] ioctl(4, LOOP_SET_FD, 3 [pid 5253] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5250] munmap(0x7f5116c00000, 138412032 [pid 5252] <... ioctl resumed>) = 0 [pid 5251] munmap(0x7f5116c00000, 138412032 [pid 5252] close(3 [pid 5251] <... munmap resumed>) = 0 [pid 5250] <... munmap resumed>) = 0 [pid 5252] <... close resumed>) = 0 [pid 5252] close(4) = 0 [pid 5252] mkdir("./file0", 0777) = 0 [pid 5252] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5251] <... openat resumed>) = 4 [pid 5250] <... openat resumed>) = 4 [ 116.855985][ T5253] loop3: detected capacity change from 0 to 32768 [ 116.878939][ T5252] loop1: detected capacity change from 0 to 32768 [ 116.883018][ T5253] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5253) [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5251] ioctl(4, LOOP_SET_FD, 3 [pid 5254] <... write resumed>) = 16777216 [pid 5254] munmap(0x7f5116c00000, 138412032 [pid 5250] <... ioctl resumed>) = 0 [pid 5251] <... ioctl resumed>) = 0 [pid 5250] close(3 [pid 5251] close(3 [pid 5250] <... close resumed>) = 0 [pid 5251] <... close resumed>) = 0 [pid 5250] close(4 [pid 5251] close(4 [pid 5250] <... close resumed>) = 0 [pid 5251] <... close resumed>) = 0 [pid 5250] mkdir("./file0", 0777 [pid 5251] mkdir("./file0", 0777 [pid 5250] <... mkdir resumed>) = 0 [pid 5251] <... mkdir resumed>) = 0 [ 116.920137][ T5250] loop2: detected capacity change from 0 to 32768 [ 116.928354][ T5251] loop0: detected capacity change from 0 to 32768 [ 116.948219][ T5252] BTRFS: device /dev/loop1 (7:1) using temp-fsid e0006b57-b952-472f-8342-c9b28c8ccd37 [pid 5250] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5254] <... munmap resumed>) = 0 [pid 5251] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 116.960523][ T5252] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5252) [pid 5254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5254] close(3) = 0 [pid 5254] close(4) = 0 [pid 5254] mkdir("./file0", 0777) = 0 [ 116.995188][ T5254] loop4: detected capacity change from 0 to 32768 [ 117.006223][ T5251] BTRFS: device /dev/loop0 (7:0) using temp-fsid 5c807be3-f8d6-4b7a-b6d5-a1dade8d1174 [ 117.012698][ T5253] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.019939][ T5251] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5251) [ 117.042960][ T5252] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.058945][ T5253] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.060248][ T5252] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 117.080165][ T5252] BTRFS info (device loop1): using free-space-tree [ 117.084741][ T5253] BTRFS info (device loop3): using free-space-tree [ 117.095640][ T5250] BTRFS: device /dev/loop2 (7:2) using temp-fsid 95d994d8-12b0-4de5-8dec-c9550c25c04f [ 117.109050][ T5251] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.118952][ T5250] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5250) [ 117.122480][ T5251] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 117.141339][ T5251] BTRFS info (device loop0): using free-space-tree [ 117.148309][ T5254] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6f431f5c-9e19-453e-ad78-ce85e6bba9fa [ 117.152726][ T5250] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.161207][ T5254] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5254) [ 117.175401][ T5250] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 117.194498][ T5250] BTRFS info (device loop2): using free-space-tree [ 117.207786][ T5254] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.262717][ T5254] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 117.284739][ T5254] BTRFS info (device loop4): using free-space-tree [pid 5254] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5253] <... mount resumed>) = 0 [pid 5253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5253] chdir("./file0") = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_CLR_FD) = 0 [pid 5253] close(4) = 0 [pid 5253] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... futex resumed>) = 0 [pid 5248] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5252] <... mount resumed>) = 0 [pid 5251] <... mount resumed>) = 0 [pid 5251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5251] chdir("./file0" [pid 5253] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... openat resumed>) = 3 [pid 5251] <... chdir resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5248] <... futex resumed>) = 0 [pid 5251] <... openat resumed>) = 4 [pid 5251] ioctl(4, LOOP_CLR_FD) = 0 [pid 5253] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] close(4 [pid 5252] chdir("./file0" [pid 5251] <... close resumed>) = 0 [pid 5252] <... chdir resumed>) = 0 [pid 5248] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5251] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5245] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5245] <... futex resumed>) = 0 [pid 5251] <... openat resumed>) = 4 [pid 5245] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... openat resumed>) = 4 [pid 5253] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5252] ioctl(4, LOOP_CLR_FD) = 0 [pid 5251] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] close(4 [pid 5251] <... futex resumed>) = 1 [pid 5253] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... close resumed>) = 0 [pid 5251] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... futex resumed>) = 1 [pid 5252] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5248] exit_group(0) = ? [pid 5252] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5245] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] +++ exited with 0 +++ [pid 5252] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5251] <... futex resumed>) = 0 [pid 5248] +++ exited with 0 +++ [pid 5247] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = 1 [pid 5252] <... openat resumed>) = 4 [pid 5251] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5247] <... futex resumed>) = 0 [pid 5245] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 5251] <... fallocate resumed>) = 0 [pid 5247] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 5251] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... restart_syscall resumed>) = 0 [pid 5252] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5252] <... futex resumed>) = 1 [pid 5251] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] <... futex resumed>) = 0 [pid 5245] exit_group(0 [pid 5251] <... futex resumed>) = ? [pid 5247] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... exit_group resumed>) = ? [pid 5252] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5251] +++ exited with 0 +++ [pid 5250] <... mount resumed>) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5245] +++ exited with 0 +++ [pid 5243] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5252] <... fallocate resumed>) = 0 [pid 5250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5247] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=32 /* 0.32 s */} --- [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 5250] <... openat resumed>) = 3 [pid 5243] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5250] chdir("./file0" [pid 5243] <... openat resumed>) = 3 [pid 5252] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... chdir resumed>) = 0 [pid 5243] newfstatat(3, "", [pid 5252] <... futex resumed>) = 1 [pid 5250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5247] <... futex resumed>) = 0 [pid 5250] <... openat resumed>) = 4 [pid 5247] exit_group(0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5250] ioctl(4, LOOP_CLR_FD [pid 5247] <... exit_group resumed>) = ? [pid 5254] <... mount resumed>) = 0 [pid 5252] +++ exited with 0 +++ [pid 5250] <... ioctl resumed>) = 0 [pid 5247] +++ exited with 0 +++ [pid 5243] getdents64(3, [pid 5240] <... restart_syscall resumed>) = 0 [pid 5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5254] <... openat resumed>) = 3 [pid 5250] close(4) = 0 [pid 5240] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5250] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5254] chdir("./file0" [pid 5250] <... futex resumed>) = 1 [pid 5246] <... futex resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5254] <... chdir resumed>) = 0 [pid 5250] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5246] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] newfstatat(3, "", [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5250] <... openat resumed>) = 4 [pid 5246] <... futex resumed>) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5254] <... openat resumed>) = 4 [pid 5243] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5241] <... openat resumed>) = 3 [pid 5240] getdents64(3, [pid 5254] ioctl(4, LOOP_CLR_FD) = 0 [pid 5250] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] newfstatat(3, "", [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5254] close(4 [pid 5250] <... futex resumed>) = 1 [pid 5246] <... futex resumed>) = 0 [pid 5243] unlink("./0/binderfs" [pid 5254] <... close resumed>) = 0 [pid 5250] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5254] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5249] <... futex resumed>) = 0 [pid 5243] <... unlink resumed>) = 0 [pid 5241] getdents64(3, [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5254] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5250] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5249] <... futex resumed>) = 0 [pid 5254] <... openat resumed>) = 4 [pid 5250] <... fallocate resumed>) = 0 [pid 5249] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5250] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] unlink("./0/binderfs" [pid 5254] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = 1 [pid 5246] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5250] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5249] <... futex resumed>) = 0 [pid 5246] exit_group(0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] <... unlink resumed>) = 0 [pid 5250] <... futex resumed>) = ? [pid 5249] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... exit_group resumed>) = ? [pid 5240] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5254] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5250] +++ exited with 0 +++ [pid 5249] <... futex resumed>) = 0 [pid 5246] +++ exited with 0 +++ [pid 5241] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5254] <... fallocate resumed>) = 0 [pid 5249] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5249] <... futex resumed>) = 0 [pid 5254] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5249] exit_group(0 [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 5241] unlink("./0/binderfs" [pid 5249] <... exit_group resumed>) = ? [pid 5254] <... futex resumed>) = ? [pid 5242] <... restart_syscall resumed>) = 0 [pid 5241] <... unlink resumed>) = 0 [pid 5254] +++ exited with 0 +++ [pid 5249] +++ exited with 0 +++ [pid 5241] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=22 /* 0.22 s */} --- [pid 5242] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./0/binderfs") = 0 [pid 5244] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... openat resumed>) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./0/binderfs") = 0 [ 117.766891][ T5240] BTRFS info (device loop0): last unmount of filesystem 5c807be3-f8d6-4b7a-b6d5-a1dade8d1174 [ 117.780179][ T5241] BTRFS info (device loop1): last unmount of filesystem e0006b57-b952-472f-8342-c9b28c8ccd37 [ 117.792879][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.848953][ T5242] BTRFS info (device loop2): last unmount of filesystem 95d994d8-12b0-4de5-8dec-c9550c25c04f [ 117.863826][ T5244] BTRFS info (device loop4): last unmount of filesystem 6f431f5c-9e19-453e-ad78-ce85e6bba9fa [pid 5242] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./0/file0" [pid 5242] <... umount2 resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3 [pid 5242] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... close resumed>) = 0 [pid 5242] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] rmdir("./0") = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] mkdir("./1", 0777 [pid 5242] <... openat resumed>) = 4 [pid 5240] <... mkdir resumed>) = 0 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5242] getdents64(4, [pid 5240] <... openat resumed>) = 3 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5242] getdents64(4, [pid 5240] <... ioctl resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] <... umount2 resumed>) = 0 [pid 5240] close(3 [pid 5241] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] <... close resumed>) = 0 [pid 5241] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] close(4 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5345 attached [pid 5242] <... close resumed>) = 0 [pid 5241] getdents64(4, [pid 5345] set_robust_list(0x55558b77b760, 24 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] rmdir("./0/file0" [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5345 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5241] close(4 [pid 5345] chdir("./1" [pid 5241] <... close resumed>) = 0 [pid 5345] <... chdir resumed>) = 0 [pid 5241] rmdir("./0/file0") = 0 [pid 5345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5241] getdents64(3, [pid 5345] <... prctl resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5345] setpgid(0, 0 [pid 5242] <... rmdir resumed>) = 0 [pid 5241] close(3 [pid 5345] <... setpgid resumed>) = 0 [pid 5241] <... close resumed>) = 0 [pid 5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5241] rmdir("./0" [pid 5345] <... openat resumed>) = 3 [pid 5241] <... rmdir resumed>) = 0 [pid 5345] write(3, "1000", 4 [pid 5242] getdents64(3, [pid 5241] mkdir("./1", 0777 [pid 5345] <... write resumed>) = 4 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5345] close(3 [pid 5242] close(3 [pid 5241] <... mkdir resumed>) = 0 [pid 5242] <... close resumed>) = 0 [pid 5242] rmdir("./0" [pid 5345] <... close resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5345] symlink("/dev/binderfs", "./binderfs" [pid 5241] <... openat resumed>) = 3 [pid 5345] <... symlink resumed>) = 0 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 5346 attached [pid 5346] set_robust_list(0x55558b77b760, 24 [pid 5345] write(1, "executing program\n", 18 [pid 5242] <... rmdir resumed>) = 0 [pid 5346] <... set_robust_list resumed>) = 0 [pid 5345] <... write resumed>) = 18 [pid 5242] mkdir("./1", 0777 [pid 5345] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] chdir("./1" [pid 5345] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] <... mkdir resumed>) = 0 [pid 5346] <... chdir resumed>) = 0 [pid 5345] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] <... openat resumed>) = 3 [pid 5345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 5346 [pid 5345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5345] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5346] setpgid(0, 0 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5345] <... clone3 resumed> => {parent_tid=[5347]}, 88) = 5347 [pid 5345] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5347 attached [pid 5242] <... ioctl resumed>) = 0 [pid 5346] <... setpgid resumed>) = 0 [pid 5345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5345] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5345] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5347] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5347] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5347] memfd_create("syzkaller", 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] close(3 [pid 5347] <... memfd_create resumed>) = 3 [pid 5242] <... close resumed>) = 0 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5348 attached [pid 5346] <... openat resumed>) = 3 [pid 5348] set_robust_list(0x55558b77b760, 24 [pid 5346] write(3, "1000", 4 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 5348 [pid 5346] <... write resumed>) = 4 [pid 5348] <... set_robust_list resumed>) = 0 [pid 5348] chdir("./1" [pid 5346] close(3 [pid 5348] <... chdir resumed>) = 0 [pid 5346] <... close resumed>) = 0 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5346] symlink("/dev/binderfs", "./binderfs" [pid 5348] <... prctl resumed>) = 0 executing program [pid 5348] setpgid(0, 0 [pid 5346] <... symlink resumed>) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 5348] <... setpgid resumed>) = 0 [pid 5244] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5346] write(1, "executing program\n", 18 [pid 5244] newfstatat(AT_FDCWD, "./0/file0", [pid 5346] <... write resumed>) = 18 [pid 5348] <... openat resumed>) = 3 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5348] write(3, "1000", 4 [pid 5346] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5348] <... write resumed>) = 4 [pid 5244] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5348] close(3 [pid 5346] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5348] <... close resumed>) = 0 [pid 5346] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5348] symlink("/dev/binderfs", "./binderfs" [pid 5346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5348] <... symlink resumed>) = 0 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 5348] write(1, "executing program\n", 18 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] <... openat resumed>) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, [pid 5348] <... write resumed>) = 18 [pid 5346] <... mmap resumed>) = 0x7f511f01f000 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5346] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5348] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] <... mprotect resumed>) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5346] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] close(4 [pid 5348] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5346] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] <... close resumed>) = 0 [pid 5348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] rmdir("./0/file0" [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5346] <... clone3 resumed> => {parent_tid=[5349]}, 88) = 5349 [pid 5346] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5349 attached [pid 5348] <... mmap resumed>) = 0x7f511f01f000 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5349] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5348] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5346] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] close(3 [pid 5346] <... futex resumed>) = 0 [pid 5348] <... mprotect resumed>) = 0 [pid 5349] <... rseq resumed>) = 0 [pid 5346] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5244] <... close resumed>) = 0 [pid 5244] rmdir("./0") = 0 [pid 5349] set_robust_list(0x7f511f03f9a0, 24 [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] mkdir("./1", 0777 [pid 5349] <... set_robust_list resumed>) = 0 [pid 5348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5244] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5350 attached [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = 0 [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5351 attached [pid 5350] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5349] memfd_create("syzkaller", 0 [pid 5348] <... clone3 resumed> => {parent_tid=[5350]}, 88) = 5350 [pid 5349] <... memfd_create resumed>) = 3 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5350] <... rseq resumed>) = 0 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5351 [pid 5350] set_robust_list(0x7f511f03f9a0, 24 [pid 5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 5350] <... set_robust_list resumed>) = 0 [pid 5348] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... mmap resumed>) = 0x7f5116c00000 [pid 5351] set_robust_list(0x55558b77b760, 24) = 0 [pid 5351] chdir("./1" [pid 5243] <... umount2 resumed>) = 0 [pid 5351] <... chdir resumed>) = 0 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5351] close(3) = 0 [pid 5351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5351] write(1, "executing program\n", 18) = 18 [pid 5351] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5351] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5352]}, 88) = 5352 [pid 5351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5351] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5350] rt_sigprocmask(SIG_SETMASK, [], [pid 5351] <... futex resumed>) = 0 [pid 5351] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5352 attached [pid 5352] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5352] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5352] memfd_create("syzkaller", 0 [pid 5350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5350] memfd_create("syzkaller", 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] <... memfd_create resumed>) = 3 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5243] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5350] <... memfd_create resumed>) = 3 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5243] <... openat resumed>) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./0/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./0") = 0 [pid 5243] mkdir("./1", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5353 attached [pid 5353] set_robust_list(0x55558b77b760, 24) = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5353 [pid 5353] chdir("./1") = 0 [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5353] setpgid(0, 0) = 0 [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5353] write(3, "1000", 4) = 4 [pid 5353] close(3) = 0 [pid 5353] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5353] write(1, "executing program\n", 18) = 18 [pid 5353] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5353] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5353] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5354 attached => {parent_tid=[5354]}, 88) = 5354 [pid 5353] rt_sigprocmask(SIG_SETMASK, [], [pid 5354] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5353] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... rseq resumed>) = 0 [pid 5354] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5354] memfd_create("syzkaller", 0) = 3 [pid 5354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5347] <... write resumed>) = 16777216 [pid 5347] munmap(0x7f5116c00000, 138412032) = 0 [pid 5349] <... write resumed>) = 16777216 [pid 5347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5347] ioctl(4, LOOP_SET_FD, 3 [pid 5349] munmap(0x7f5116c00000, 138412032 [pid 5347] <... ioctl resumed>) = 0 [pid 5347] close(3) = 0 [pid 5347] close(4) = 0 [pid 5347] mkdir("./file0", 0777) = 0 [pid 5347] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5350] <... write resumed>) = 16777216 [pid 5349] <... munmap resumed>) = 0 [pid 5350] munmap(0x7f5116c00000, 138412032 [pid 5349] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5350] <... munmap resumed>) = 0 [ 119.229046][ T5347] loop0: detected capacity change from 0 to 32768 [ 119.256125][ T5347] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5347) [pid 5349] ioctl(4, LOOP_SET_FD, 3 [pid 5350] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5349] <... ioctl resumed>) = 0 [pid 5349] close(3 [pid 5350] <... openat resumed>) = 4 [pid 5349] <... close resumed>) = 0 [pid 5349] close(4 [pid 5350] ioctl(4, LOOP_SET_FD, 3 [pid 5349] <... close resumed>) = 0 [pid 5349] mkdir("./file0", 0777) = 0 [ 119.296500][ T5349] loop1: detected capacity change from 0 to 32768 [ 119.329634][ T5350] loop2: detected capacity change from 0 to 32768 [pid 5349] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5350] <... ioctl resumed>) = 0 [pid 5350] close(3) = 0 [pid 5350] close(4 [pid 5352] <... write resumed>) = 16777216 [pid 5350] <... close resumed>) = 0 [pid 5350] mkdir("./file0", 0777) = 0 [pid 5352] munmap(0x7f5116c00000, 138412032 [ 119.338331][ T5347] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 119.360848][ T5349] BTRFS: device /dev/loop1 (7:1) using temp-fsid cf7611f6-e3af-4bbf-b4c0-6914399a21d1 [ 119.364957][ T5347] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 5350] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5352] <... munmap resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5352] close(3) = 0 [pid 5352] close(4) = 0 [pid 5352] mkdir("./file0", 0777) = 0 [ 119.401341][ T5349] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5349) [ 119.414294][ T5352] loop4: detected capacity change from 0 to 32768 [ 119.421454][ T5347] BTRFS info (device loop0): using free-space-tree [pid 5352] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5354] <... write resumed>) = 16777216 [ 119.490567][ T5350] BTRFS: device /dev/loop2 (7:2) using temp-fsid 02d099ee-8ca3-4116-bd46-9d1576aaa965 [ 119.496305][ T5349] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 119.500948][ T5350] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5350) [ 119.529337][ T5349] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5354] munmap(0x7f5116c00000, 138412032) = 0 [pid 5354] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5354] ioctl(4, LOOP_SET_FD, 3) = 0 [ 119.538768][ T5349] BTRFS info (device loop1): using free-space-tree [ 119.541777][ T5354] loop3: detected capacity change from 0 to 32768 [ 119.555426][ T5352] BTRFS: device /dev/loop4 (7:4) using temp-fsid ab246a41-a936-44cc-a8e4-ab91477df611 [ 119.571773][ T5350] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5354] close(3) = 0 [pid 5354] close(4) = 0 [pid 5354] mkdir("./file0", 0777) = 0 [ 119.582516][ T5352] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5352) [ 119.593042][ T5350] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.624902][ T5354] BTRFS: device /dev/loop3 (7:3) using temp-fsid f775041c-07cd-455c-ac68-f588b5ae303f [ 119.634638][ T5350] BTRFS info (device loop2): using free-space-tree [ 119.641244][ T5354] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5354) [ 119.641531][ T5352] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5354] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5347] <... mount resumed>) = 0 [pid 5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5347] chdir("./file0") = 0 [pid 5347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 5347] close(4) = 0 [pid 5347] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5347] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5345] <... futex resumed>) = 0 [pid 5345] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... futex resumed>) = 0 [pid 5347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5347] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] <... futex resumed>) = 0 [pid 5345] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5345] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5347] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] <... futex resumed>) = 0 [pid 5345] exit_group(0) = ? [pid 5347] +++ exited with 0 +++ [pid 5345] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5345, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 119.703464][ T5352] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 119.716766][ T5352] BTRFS info (device loop4): using free-space-tree [pid 5240] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./1/binderfs") = 0 [ 119.746242][ T5354] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 119.801364][ T5354] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 119.838500][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 119.844264][ T5354] BTRFS info (device loop3): using free-space-tree [pid 5240] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5350] <... mount resumed>) = 0 [pid 5352] <... mount resumed>) = 0 [pid 5350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5349] <... mount resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5350] chdir("./file0") = 0 [pid 5352] <... openat resumed>) = 3 [pid 5350] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5350] ioctl(4, LOOP_CLR_FD [pid 5349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5352] chdir("./file0") = 0 [pid 5349] <... openat resumed>) = 3 [pid 5352] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5350] <... ioctl resumed>) = 0 [pid 5349] chdir("./file0" [pid 5350] close(4 [pid 5349] <... chdir resumed>) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5352] close(4 [pid 5349] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5352] <... close resumed>) = 0 [pid 5350] <... close resumed>) = 0 [pid 5352] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... openat resumed>) = 4 [pid 5350] <... futex resumed>) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5351] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5348] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = 0 [pid 5352] <... openat resumed>) = 4 [pid 5348] <... futex resumed>) = 0 [pid 5351] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5348] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... openat resumed>) = 4 [pid 5349] ioctl(4, LOOP_CLR_FD) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5349] close(4 [pid 5352] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... close resumed>) = 0 [pid 5352] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5351] <... futex resumed>) = 0 [pid 5350] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5350] <... futex resumed>) = 1 [pid 5349] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] <... futex resumed>) = 0 [pid 5346] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... fallocate resumed>) = 0 [pid 5348] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] <... futex resumed>) = 0 [pid 5351] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5348] <... futex resumed>) = 0 [pid 5346] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5349] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5350] <... fallocate resumed>) = 0 [pid 5349] <... openat resumed>) = 4 [pid 5348] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... futex resumed>) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5348] exit_group(0 [pid 5350] <... futex resumed>) = ? [pid 5346] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... exit_group resumed>) = ? [pid 5349] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5346] <... futex resumed>) = 0 [pid 5350] +++ exited with 0 +++ [pid 5349] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5348] +++ exited with 0 +++ [pid 5349] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5348, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=28 /* 0.28 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 5349] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] exit_group(0) = ? [pid 5349] <... futex resumed>) = ? [pid 5352] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] +++ exited with 0 +++ [pid 5346] +++ exited with 0 +++ [pid 5352] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5242] <... restart_syscall resumed>) = 0 [pid 5242] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5352] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] exit_group(0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] <... futex resumed>) = ? [pid 5351] <... exit_group resumed>) = ? [pid 5242] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=24 /* 0.24 s */} --- [pid 5352] +++ exited with 0 +++ [pid 5351] +++ exited with 0 +++ [pid 5242] <... openat resumed>) = 3 [pid 5242] newfstatat(3, "", [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 5242] getdents64(3, [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 5244] <... restart_syscall resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] <... restart_syscall resumed>) = 0 [pid 5242] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5241] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] unlink("./1/binderfs" [pid 5241] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... openat resumed>) = 3 [pid 5242] <... unlink resumed>) = 0 [pid 5241] <... openat resumed>) = 3 [pid 5244] newfstatat(3, "", [pid 5242] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] newfstatat(3, "", [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, [pid 5241] getdents64(3, [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5241] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./1/binderfs" [pid 5241] unlink("./1/binderfs" [pid 5244] <... unlink resumed>) = 0 [pid 5241] <... unlink resumed>) = 0 [pid 5241] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5354] <... mount resumed>) = 0 [pid 5354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5240] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5354] <... openat resumed>) = 3 [pid 5354] chdir("./file0") = 0 [pid 5354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5240] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5354] <... openat resumed>) = 4 [ 120.047007][ T5242] BTRFS info (device loop2): last unmount of filesystem 02d099ee-8ca3-4116-bd46-9d1576aaa965 [pid 5240] close(4 [pid 5354] ioctl(4, LOOP_CLR_FD) = 0 [pid 5240] <... close resumed>) = 0 [pid 5240] rmdir("./1/file0") = 0 [pid 5240] getdents64(3, [pid 5354] close(4 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5354] <... close resumed>) = 0 [pid 5240] close(3 [pid 5354] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5353] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] rmdir("./1" [pid 5354] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... openat resumed>) = 4 [pid 5240] <... rmdir resumed>) = 0 [pid 5354] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5353] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5353] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] mkdir("./2", 0777 [pid 5354] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5240] <... mkdir resumed>) = 0 [pid 5354] <... fallocate resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5354] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... openat resumed>) = 3 [pid 5354] <... futex resumed>) = 1 [pid 5353] <... futex resumed>) = 0 [pid 5354] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] exit_group(0 [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5354] <... futex resumed>) = ? [pid 5353] <... exit_group resumed>) = ? [pid 5240] <... ioctl resumed>) = 0 [pid 5354] +++ exited with 0 +++ [pid 5353] +++ exited with 0 +++ [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5436 attached [pid 5436] set_robust_list(0x55558b77b760, 24 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5436 [pid 5436] <... set_robust_list resumed>) = 0 [pid 5436] chdir("./2") = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs" [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 5436] <... symlink resumed>) = 0 executing program [pid 5436] write(1, "executing program\n", 18 [pid 5243] <... restart_syscall resumed>) = 0 [pid 5436] <... write resumed>) = 18 [pid 5436] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5436] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] <... umount2 resumed>) = 0 [pid 5243] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... openat resumed>) = 3 [pid 5243] newfstatat(3, "", [pid 5242] newfstatat(AT_FDCWD, "./1/file0", [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] getdents64(3, [pid 5242] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 120.107378][ T5244] BTRFS info (device loop4): last unmount of filesystem ab246a41-a936-44cc-a8e4-ab91477df611 [ 120.145385][ T5241] BTRFS info (device loop1): last unmount of filesystem cf7611f6-e3af-4bbf-b4c0-6914399a21d1 [pid 5242] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... openat resumed>) = 4 [pid 5436] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5243] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5242] newfstatat(4, "", [pid 5436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, ./strace-static-x86_64: Process 5437 attached [pid 5436] <... clone3 resumed> => {parent_tid=[5437]}, 88) = 5437 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5437] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5436] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] unlink("./1/binderfs" [pid 5242] getdents64(4, [pid 5436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] <... unlink resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5437] <... rseq resumed>) = 0 [pid 5436] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5437] set_robust_list(0x7f511f03f9a0, 24 [pid 5436] <... futex resumed>) = 0 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5436] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] close(4) = 0 [pid 5437] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] rmdir("./1/file0" [pid 5437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5437] memfd_create("syzkaller", 0 [pid 5242] rmdir("./1") = 0 [pid 5242] mkdir("./2", 0777 [pid 5437] <... memfd_create resumed>) = 3 [pid 5242] <... mkdir resumed>) = 0 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5438 attached [pid 5437] <... mmap resumed>) = 0x7f5116c00000 [pid 5438] set_robust_list(0x55558b77b760, 24) = 0 [pid 5438] chdir("./2" [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 5438 [pid 5438] <... chdir resumed>) = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5438] write(1, "executing program\n", 18) = 18 [pid 5438] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5438] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5439]}, 88) = 5439 ./strace-static-x86_64: Process 5439 attached [pid 5438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5438] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5439] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5439] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5439] memfd_create("syzkaller", 0) = 3 [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 120.303171][ T5243] BTRFS info (device loop3): last unmount of filesystem f775041c-07cd-455c-ac68-f588b5ae303f [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./1/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./1") = 0 [pid 5241] mkdir("./2", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5440 ./strace-static-x86_64: Process 5440 attached [pid 5440] set_robust_list(0x55558b77b760, 24) = 0 [pid 5440] chdir("./2") = 0 [pid 5440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5440] setpgid(0, 0) = 0 [pid 5440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5440] write(3, "1000", 4) = 4 [pid 5440] close(3) = 0 [pid 5440] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5440] write(1, "executing program\n", 18executing program ) = 18 [pid 5440] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... umount2 resumed>) = 0 [pid 5440] <... futex resumed>) = 0 [pid 5440] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5244] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5440] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5244] newfstatat(AT_FDCWD, "./1/file0", ./strace-static-x86_64: Process 5441 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5440] <... clone3 resumed> => {parent_tid=[5441]}, 88) = 5441 [pid 5244] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5441] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5440] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5440] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... rseq resumed>) = 0 [pid 5440] <... futex resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5440] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5244] newfstatat(4, "", [pid 5441] set_robust_list(0x7f511f03f9a0, 24 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5441] <... set_robust_list resumed>) = 0 [pid 5441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5441] memfd_create("syzkaller", 0) = 3 [pid 5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./1/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./1") = 0 [pid 5244] mkdir("./2", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5442 attached [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5442 [pid 5442] set_robust_list(0x55558b77b760, 24) = 0 [pid 5442] chdir("./2") = 0 [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5442] setpgid(0, 0) = 0 [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5442] write(3, "1000", 4 [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5442] <... write resumed>) = 4 [pid 5442] close(3) = 0 [pid 5442] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5442] write(1, "executing program\n", 18 [pid 5243] <... umount2 resumed>) = 0 [pid 5442] <... write resumed>) = 18 [pid 5243] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5442] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] <... futex resumed>) = 0 [pid 5243] newfstatat(AT_FDCWD, "./1/file0", [pid 5442] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5442] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5243] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] <... openat resumed>) = 4 [pid 5442] <... mmap resumed>) = 0x7f511f01f000 [pid 5243] newfstatat(4, "", [pid 5442] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5442] <... mprotect resumed>) = 0 [pid 5243] getdents64(4, [pid 5442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5243] getdents64(4, [pid 5442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5443 attached [pid 5243] close(4 [pid 5443] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5442] <... clone3 resumed> => {parent_tid=[5443]}, 88) = 5443 [pid 5243] <... close resumed>) = 0 [pid 5443] <... rseq resumed>) = 0 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] rmdir("./1/file0" [pid 5443] set_robust_list(0x7f511f03f9a0, 24 [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 5443] <... set_robust_list resumed>) = 0 [pid 5442] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] getdents64(3, [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5442] <... futex resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5442] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] close(3) = 0 [pid 5443] memfd_create("syzkaller", 0) = 3 [pid 5243] rmdir("./1" [pid 5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5243] <... rmdir resumed>) = 0 [pid 5443] <... mmap resumed>) = 0x7f5116c00000 [pid 5243] mkdir("./2", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5444 ./strace-static-x86_64: Process 5444 attached [pid 5444] set_robust_list(0x55558b77b760, 24) = 0 [pid 5444] chdir("./2") = 0 [pid 5444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5444] setpgid(0, 0) = 0 [pid 5444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5444] write(3, "1000", 4) = 4 [pid 5444] close(3) = 0 [pid 5444] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5444] write(1, "executing program\n", 18) = 18 [pid 5444] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5444] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5445 attached => {parent_tid=[5445]}, 88) = 5445 [pid 5444] rt_sigprocmask(SIG_SETMASK, [], [pid 5445] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5445] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5444] <... futex resumed>) = 1 [pid 5445] memfd_create("syzkaller", 0 [pid 5444] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5445] <... memfd_create resumed>) = 3 [pid 5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5437] <... write resumed>) = 16777216 [pid 5437] munmap(0x7f5116c00000, 138412032 [pid 5439] <... write resumed>) = 16777216 [pid 5437] <... munmap resumed>) = 0 [pid 5439] munmap(0x7f5116c00000, 138412032 [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_SET_FD, 3 [pid 5439] <... munmap resumed>) = 0 [pid 5437] <... ioctl resumed>) = 0 [pid 5439] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5437] close(3 [pid 5439] <... openat resumed>) = 4 [pid 5437] <... close resumed>) = 0 [pid 5439] ioctl(4, LOOP_SET_FD, 3 [pid 5437] close(4) = 0 [pid 5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 121.129275][ T5437] loop0: detected capacity change from 0 to 32768 [ 121.164223][ T5439] loop2: detected capacity change from 0 to 32768 [pid 5437] mkdir("./file0", 0777 [pid 5439] <... ioctl resumed>) = 0 [pid 5437] <... mkdir resumed>) = 0 [pid 5439] close(3 [pid 5437] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5439] <... close resumed>) = 0 [pid 5439] close(4) = 0 [pid 5439] mkdir("./file0", 0777) = 0 [ 121.182418][ T5437] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5437) [ 121.257638][ T5439] BTRFS: device /dev/loop2 (7:2) using temp-fsid 95c9dc10-19ad-4652-a575-f37f1e51171a [ 121.273258][ T5437] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5439] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 121.302737][ T5439] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5439) [ 121.316112][ T5437] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 121.344828][ T5437] BTRFS info (device loop0): using free-space-tree [pid 5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5441] <... write resumed>) = 16777216 [ 121.378740][ T5439] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5441] munmap(0x7f5116c00000, 138412032) = 0 [pid 5441] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5441] ioctl(4, LOOP_SET_FD, 3) = 0 [ 121.423091][ T5439] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 121.454470][ T5441] loop1: detected capacity change from 0 to 32768 [ 121.461077][ T5439] BTRFS info (device loop2): using free-space-tree [pid 5441] close(3) = 0 [pid 5441] close(4) = 0 [pid 5443] <... write resumed>) = 16777216 [pid 5441] mkdir("./file0", 0777) = 0 [pid 5441] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 121.523431][ T5441] BTRFS: device /dev/loop1 (7:1) using temp-fsid 9400386a-3ac1-4983-a7ba-0b6a3914119e [pid 5443] munmap(0x7f5116c00000, 138412032) = 0 [pid 5443] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5443] ioctl(4, LOOP_SET_FD, 3 [pid 5445] <... write resumed>) = 16777216 [pid 5443] <... ioctl resumed>) = 0 [pid 5443] close(3 [pid 5445] munmap(0x7f5116c00000, 138412032 [pid 5443] <... close resumed>) = 0 [pid 5443] close(4) = 0 [pid 5443] mkdir("./file0", 0777) = 0 [ 121.593907][ T5441] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5441) [ 121.625635][ T5443] loop4: detected capacity change from 0 to 32768 [pid 5443] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5445] <... munmap resumed>) = 0 [pid 5445] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5445] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5445] close(3) = 0 [pid 5445] close(4) = 0 [ 121.672495][ T5441] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 121.690858][ T5445] loop3: detected capacity change from 0 to 32768 [ 121.692923][ T5443] BTRFS: device /dev/loop4 (7:4) using temp-fsid df0157aa-556c-43f9-bc76-acf5cbe89a10 [pid 5445] mkdir("./file0", 0777) = 0 [pid 5445] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5437] <... mount resumed>) = 0 [pid 5437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5437] chdir("./file0") = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_CLR_FD) = 0 [pid 5437] close(4) = 0 [pid 5437] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5437] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] <... mount resumed>) = 0 [pid 5439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5436] <... futex resumed>) = 0 [pid 5439] <... openat resumed>) = 3 [pid 5436] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] chdir("./file0" [pid 5437] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = 1 [pid 5439] <... chdir resumed>) = 0 [pid 5437] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5436] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... openat resumed>) = 4 [pid 5437] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5437] <... futex resumed>) = 0 [pid 5436] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... openat resumed>) = 4 [pid 5437] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5436] <... futex resumed>) = 0 [pid 5439] ioctl(4, LOOP_CLR_FD [pid 5437] <... fallocate resumed>) = 0 [pid 5436] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] <... ioctl resumed>) = 0 [pid 5437] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5437] <... futex resumed>) = 0 [pid 5437] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] exit_group(0 [pid 5439] close(4 [pid 5436] <... exit_group resumed>) = ? [pid 5439] <... close resumed>) = 0 [pid 5437] <... futex resumed>) = ? [pid 5439] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] +++ exited with 0 +++ [pid 5436] +++ exited with 0 +++ [pid 5439] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5439] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=22 /* 0.22 s */} --- [pid 5439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5438] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 5439] <... openat resumed>) = 4 [pid 5439] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [ 121.716901][ T5441] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 121.731068][ T5441] BTRFS info (device loop1): using free-space-tree [pid 5438] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5438] <... futex resumed>) = 0 [pid 5240] <... restart_syscall resumed>) = 0 [pid 5240] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./2/binderfs") = 0 [pid 5240] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5438] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] <... fallocate resumed>) = 0 [pid 5439] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5438] exit_group(0) = ? [pid 5439] +++ exited with 0 +++ [pid 5438] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5242] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./2/binderfs") = 0 [ 121.791494][ T5443] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5443) [ 121.829416][ T5445] BTRFS: device /dev/loop3 (7:3) using temp-fsid f35301e8-6550-4004-94da-d1b596c1fb5b [ 121.841689][ T5443] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 121.843889][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 121.852221][ T5445] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5445) [ 121.875659][ T5443] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 121.885261][ T5443] BTRFS info (device loop4): using free-space-tree [pid 5242] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5441] <... mount resumed>) = 0 [pid 5441] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5441] chdir("./file0") = 0 [pid 5441] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5441] ioctl(4, LOOP_CLR_FD) = 0 [pid 5441] close(4) = 0 [pid 5441] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5441] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] <... futex resumed>) = 0 [pid 5440] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5440] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5441] <... futex resumed>) = 0 [ 121.903551][ T5242] BTRFS info (device loop2): last unmount of filesystem 95c9dc10-19ad-4652-a575-f37f1e51171a [ 121.918548][ T5445] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5441] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5441] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5441] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] <... futex resumed>) = 0 [pid 5440] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... futex resumed>) = 0 [pid 5440] <... futex resumed>) = 1 [pid 5441] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5441] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5441] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5440] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] exit_group(0 [pid 5441] <... futex resumed>) = ? [pid 5440] <... exit_group resumed>) = ? [pid 5441] +++ exited with 0 +++ [pid 5440] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5440, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./2/binderfs") = 0 [ 121.975296][ T5445] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 122.044201][ T5445] BTRFS info (device loop3): using free-space-tree [ 122.060741][ T5241] BTRFS info (device loop1): last unmount of filesystem 9400386a-3ac1-4983-a7ba-0b6a3914119e [pid 5241] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5241] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./2/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./2") = 0 [pid 5241] mkdir("./3", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5524 ./strace-static-x86_64: Process 5524 attached [pid 5524] set_robust_list(0x55558b77b760, 24) = 0 [pid 5524] chdir("./3") = 0 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5524] setpgid(0, 0) = 0 [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5524] write(3, "1000", 4) = 4 [pid 5524] close(3) = 0 [pid 5524] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5524] write(1, "executing program\n", 18) = 18 [pid 5524] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5524] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5443] <... mount resumed>) = 0 [pid 5443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5443] chdir("./file0") = 0 [pid 5443] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5443] ioctl(4, LOOP_CLR_FD) = 0 [pid 5443] close(4) = 0 [pid 5443] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] <... futex resumed>) = 0 [pid 5443] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5442] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] <... openat resumed>) = 4 [pid 5443] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] <... futex resumed>) = 0 [pid 5443] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5442] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5445] <... mount resumed>) = 0 [pid 5443] <... fallocate resumed>) = 0 [pid 5524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5443] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] exit_group(0 [pid 5443] <... futex resumed>) = ? [pid 5442] <... exit_group resumed>) = ? [pid 5443] +++ exited with 0 +++ [pid 5442] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5442, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5445] <... openat resumed>) = 3 [pid 5524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5445] chdir("./file0" [pid 5524] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5445] <... chdir resumed>) = 0 [pid 5445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5524] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5445] <... openat resumed>) = 4 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./2/binderfs") = 0 [pid 5244] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5445] ioctl(4, LOOP_CLR_FD [pid 5524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5445] <... ioctl resumed>) = 0 [pid 5445] close(4 [pid 5524] <... clone3 resumed> => {parent_tid=[5527]}, 88) = 5527 [pid 5445] <... close resumed>) = 0 ./strace-static-x86_64: Process 5527 attached [pid 5524] rt_sigprocmask(SIG_SETMASK, [], [pid 5445] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5445] <... futex resumed>) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5527] <... rseq resumed>) = 0 [pid 5524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] set_robust_list(0x7f511f03f9a0, 24 [pid 5524] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5444] <... futex resumed>) = 0 [pid 5527] <... set_robust_list resumed>) = 0 [pid 5524] <... futex resumed>) = 0 [pid 5445] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5444] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] rt_sigprocmask(SIG_SETMASK, [], [pid 5524] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] <... umount2 resumed>) = 0 [pid 5527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] <... openat resumed>) = 4 [pid 5240] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, [pid 5527] memfd_create("syzkaller", 0 [pid 5445] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5445] <... futex resumed>) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5240] close(4 [pid 5444] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... close resumed>) = 0 [pid 5444] <... futex resumed>) = 0 [pid 5240] rmdir("./2/file0" [pid 5444] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... rmdir resumed>) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./2") = 0 [pid 5240] mkdir("./3", 0777 [pid 5527] <... memfd_create resumed>) = 3 [pid 5445] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5445] <... fallocate resumed>) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5528 attached [pid 5527] <... mmap resumed>) = 0x7f5116c00000 [pid 5445] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5528 [pid 5528] set_robust_list(0x55558b77b760, 24) = 0 [pid 5528] chdir("./3") = 0 [pid 5528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5528] setpgid(0, 0) = 0 [pid 5528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5445] <... futex resumed>) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5444] exit_group(0) = ? executing program [pid 5528] <... openat resumed>) = 3 [pid 5528] write(3, "1000", 4) = 4 [pid 5528] close(3) = 0 [pid 5528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5528] write(1, "executing program\n", 18) = 18 [pid 5528] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5528] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5445] +++ exited with 0 +++ [pid 5444] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5444, si_uid=0, si_status=0, si_utime=15 /* 0.15 s */, si_stime=27 /* 0.27 s */} --- [pid 5528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5528] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5529]}, 88) = 5529 [pid 5528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5528] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5528] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5529 attached ) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5529] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5243] <... openat resumed>) = 3 [pid 5529] <... rseq resumed>) = 0 [pid 5529] set_robust_list(0x7f511f03f9a0, 24 [pid 5243] newfstatat(3, "", [pid 5529] <... set_robust_list resumed>) = 0 [ 122.344802][ T5244] BTRFS info (device loop4): last unmount of filesystem df0157aa-556c-43f9-bc76-acf5cbe89a10 [pid 5529] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, [pid 5529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5529] memfd_create("syzkaller", 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5529] <... memfd_create resumed>) = 3 [pid 5529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5243] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5529] <... mmap resumed>) = 0x7f5116c00000 [pid 5243] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... umount2 resumed>) = 0 [pid 5243] unlink("./2/binderfs" [pid 5242] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] <... unlink resumed>) = 0 [pid 5243] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./2/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./2") = 0 [pid 5242] mkdir("./3", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5530 attached , child_tidptr=0x55558b77b750) = 5530 [pid 5530] set_robust_list(0x55558b77b760, 24) = 0 [pid 5530] chdir("./3") = 0 [pid 5530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5530] setpgid(0, 0) = 0 [pid 5530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5530] write(3, "1000", 4) = 4 [pid 5530] close(3) = 0 [pid 5530] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5530] write(1, "executing program\n", 18) = 18 [pid 5530] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5530] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5532]}, 88) = 5532 [pid 5530] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5532 attached NULL, 8) = 0 [pid 5530] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5532] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5532] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5532] memfd_create("syzkaller", 0) = 3 [pid 5532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 122.509880][ T5243] BTRFS info (device loop3): last unmount of filesystem f35301e8-6550-4004-94da-d1b596c1fb5b [pid 5243] <... umount2 resumed>) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 5243] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./2/file0", [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5243] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... openat resumed>) = 4 [pid 5243] <... openat resumed>) = 4 [pid 5244] newfstatat(4, "", [pid 5243] newfstatat(4, "", [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, [pid 5243] getdents64(4, [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, [pid 5243] getdents64(4, [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4 [pid 5243] close(4) = 0 [pid 5244] <... close resumed>) = 0 [pid 5243] rmdir("./2/file0" [pid 5244] rmdir("./2/file0" [pid 5243] <... rmdir resumed>) = 0 [pid 5243] getdents64(3, [pid 5244] <... rmdir resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3 [pid 5244] getdents64(3, [pid 5243] <... close resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] rmdir("./2" [pid 5244] close(3 [pid 5243] <... rmdir resumed>) = 0 [pid 5243] mkdir("./3", 0777 [pid 5244] <... close resumed>) = 0 [pid 5244] rmdir("./2") = 0 [pid 5243] <... mkdir resumed>) = 0 [pid 5244] mkdir("./3", 0777 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5244] <... mkdir resumed>) = 0 [pid 5243] ioctl(3, LOOP_CLR_FD [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5243] <... ioctl resumed>) = 0 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5243] close(3 [pid 5244] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5243] <... close resumed>) = 0 [pid 5527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] close(3./strace-static-x86_64: Process 5533 attached ) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5533 [pid 5533] set_robust_list(0x55558b77b760, 24) = 0 [pid 5533] chdir("./3" [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5534 [pid 5533] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5534 attached [pid 5533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5534] set_robust_list(0x55558b77b760, 24 [pid 5533] <... prctl resumed>) = 0 [pid 5534] <... set_robust_list resumed>) = 0 [pid 5534] chdir("./3") = 0 [pid 5534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5534] setpgid(0, 0) = 0 executing program [pid 5534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5533] setpgid(0, 0 [pid 5534] <... openat resumed>) = 3 [pid 5534] write(3, "1000", 4) = 4 [pid 5534] close(3) = 0 [pid 5534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5534] write(1, "executing program\n", 18) = 18 [pid 5534] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5534] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5533] <... setpgid resumed>) = 0 [pid 5534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5534] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5533] <... openat resumed>) = 3 [pid 5534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5535]}, 88) = 5535 [pid 5534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5534] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5534] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5535 attached [pid 5533] write(3, "1000", 4) = 4 [pid 5533] close(3) = 0 [pid 5533] symlink("/dev/binderfs", "./binderfs" [pid 5535] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5533] <... symlink resumed>) = 0 [pid 5535] <... rseq resumed>) = 0 [pid 5533] write(1, "executing program\n", 18executing program [pid 5535] set_robust_list(0x7f511f03f9a0, 24 [pid 5533] <... write resumed>) = 18 [pid 5533] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... set_robust_list resumed>) = 0 [pid 5533] <... futex resumed>) = 0 [pid 5535] rt_sigprocmask(SIG_SETMASK, [], [pid 5533] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5533] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5535] memfd_create("syzkaller", 0 [pid 5533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5535] <... memfd_create resumed>) = 3 [pid 5533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5533] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5533] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5536 attached [pid 5536] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5533] <... clone3 resumed> => {parent_tid=[5536]}, 88) = 5536 [pid 5536] <... rseq resumed>) = 0 [pid 5533] rt_sigprocmask(SIG_SETMASK, [], [pid 5536] set_robust_list(0x7f511f03f9a0, 24 [pid 5533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5536] <... set_robust_list resumed>) = 0 [pid 5533] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] rt_sigprocmask(SIG_SETMASK, [], [pid 5533] <... futex resumed>) = 0 [pid 5536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5533] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5536] memfd_create("syzkaller", 0) = 3 [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5536] <... mmap resumed>) = 0x7f5116c00000 [pid 5532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5527] <... write resumed>) = 16777216 [pid 5527] munmap(0x7f5116c00000, 138412032) = 0 [pid 5527] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5527] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5527] close(3) = 0 [pid 5527] close(4) = 0 [pid 5529] <... write resumed>) = 16777216 [pid 5527] mkdir("./file0", 0777) = 0 [ 123.248162][ T5527] loop1: detected capacity change from 0 to 32768 [pid 5527] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5529] munmap(0x7f5116c00000, 138412032 [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5529] <... munmap resumed>) = 0 [pid 5529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5529] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5529] close(3) = 0 [ 123.302694][ T5527] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5527) [ 123.332850][ T5529] loop0: detected capacity change from 0 to 32768 [pid 5529] close(4) = 0 [pid 5529] mkdir("./file0", 0777) = 0 [ 123.378686][ T5529] BTRFS: device /dev/loop0 (7:0) using temp-fsid 9e82a152-fd35-42f9-8c5e-e60d76a26b33 [ 123.389087][ T5527] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 123.423093][ T5529] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5529) [ 123.437385][ T5527] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5529] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5532] <... write resumed>) = 16777216 [pid 5532] munmap(0x7f5116c00000, 138412032) = 0 [pid 5532] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5532] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5532] close(3) = 0 [pid 5532] close(4) = 0 [ 123.470660][ T5527] BTRFS info (device loop1): using free-space-tree [ 123.500092][ T5532] loop2: detected capacity change from 0 to 32768 [ 123.507037][ T5529] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5532] mkdir("./file0", 0777) = 0 [ 123.563712][ T5532] BTRFS: device /dev/loop2 (7:2) using temp-fsid 604c2e5d-c7f8-4d3e-bdad-a6ec5d827640 [ 123.563875][ T5529] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 123.584796][ T5529] BTRFS info (device loop0): using free-space-tree [ 123.607479][ T5532] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5532) [pid 5532] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5527] <... mount resumed>) = 0 [ 123.713218][ T5532] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 123.751694][ T5532] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 5527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5535] <... write resumed>) = 16777216 [pid 5527] <... openat resumed>) = 3 [pid 5527] chdir("./file0") = 0 [pid 5527] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5535] munmap(0x7f5116c00000, 138412032 [pid 5527] <... openat resumed>) = 4 [pid 5527] ioctl(4, LOOP_CLR_FD) = 0 [pid 5527] close(4) = 0 [pid 5527] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5524] <... futex resumed>) = 0 [pid 5527] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5524] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5524] <... futex resumed>) = 0 [pid 5527] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5524] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... openat resumed>) = 4 [pid 5527] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5524] <... futex resumed>) = 0 [pid 5527] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5524] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5524] <... futex resumed>) = 0 [pid 5527] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5524] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... fallocate resumed>) = 0 [pid 5527] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... futex resumed>) = 0 [pid 5524] exit_group(0) = ? [pid 5527] <... futex resumed>) = ? [pid 5529] <... mount resumed>) = 0 [pid 5529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5527] +++ exited with 0 +++ [pid 5524] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5241] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5529] chdir("./file0" [pid 5241] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5535] <... munmap resumed>) = 0 [ 123.793298][ T5532] BTRFS info (device loop2): using free-space-tree [pid 5529] <... chdir resumed>) = 0 [pid 5241] <... openat resumed>) = 3 [pid 5535] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5241] newfstatat(3, "", [pid 5535] <... openat resumed>) = 4 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5535] ioctl(4, LOOP_SET_FD, 3 [pid 5241] getdents64(3, [pid 5536] <... write resumed>) = 16777216 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5536] munmap(0x7f5116c00000, 138412032 [pid 5535] <... ioctl resumed>) = 0 [pid 5529] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5241] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5535] close(3 [pid 5529] <... openat resumed>) = 4 [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5535] <... close resumed>) = 0 [pid 5529] ioctl(4, LOOP_CLR_FD [pid 5241] unlink("./3/binderfs") = 0 [pid 5241] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5535] close(4) = 0 [pid 5535] mkdir("./file0", 0777 [pid 5529] <... ioctl resumed>) = 0 [pid 5529] close(4 [pid 5535] <... mkdir resumed>) = 0 [pid 5529] <... close resumed>) = 0 [ 123.856973][ T5535] loop4: detected capacity change from 0 to 32768 [pid 5535] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5529] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5528] <... futex resumed>) = 0 [pid 5528] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5528] <... futex resumed>) = 0 [pid 5529] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5528] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5529] <... futex resumed>) = 0 [pid 5536] <... munmap resumed>) = 0 [pid 5529] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5536] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5536] ioctl(4, LOOP_SET_FD, 3 [pid 5528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5528] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] <... futex resumed>) = 0 [pid 5528] <... futex resumed>) = 1 [pid 5529] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5528] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5529] <... fallocate resumed>) = 0 [pid 5529] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5528] <... futex resumed>) = 0 [pid 5529] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5528] exit_group(0 [pid 5529] <... futex resumed>) = ? [pid 5528] <... exit_group resumed>) = ? [pid 5529] +++ exited with 0 +++ [pid 5528] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5528, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./3/binderfs") = 0 [ 123.901734][ T5535] BTRFS: device /dev/loop4 (7:4) using temp-fsid ae315bb7-de20-435f-8385-2102b6a6c745 [ 123.908459][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5240] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5536] <... ioctl resumed>) = 0 [pid 5536] close(3) = 0 [pid 5536] close(4) = 0 [pid 5536] mkdir("./file0", 0777) = 0 [ 123.953919][ T5535] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5535) [ 123.958867][ T5536] loop3: detected capacity change from 0 to 32768 [pid 5536] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 123.997735][ T5536] BTRFS: device /dev/loop3 (7:3) using temp-fsid 30add80b-dc7a-48fe-9a5a-c6ca126a0e95 [ 124.021657][ T5536] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5536) [ 124.023504][ T5240] BTRFS info (device loop0): last unmount of filesystem 9e82a152-fd35-42f9-8c5e-e60d76a26b33 [pid 5241] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [ 124.071846][ T5536] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 124.110109][ T5535] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5532] <... mount resumed>) = 0 [pid 5532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5241] close(4 [pid 5532] <... openat resumed>) = 3 [pid 5532] chdir("./file0") = 0 [pid 5532] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5532] ioctl(4, LOOP_CLR_FD) = 0 [pid 5532] close(4) = 0 [pid 5532] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5532] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5532] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... close resumed>) = 0 [pid 5532] <... futex resumed>) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5530] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5532] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5532] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5530] <... futex resumed>) = 0 [pid 5530] exit_group(0) = ? [pid 5532] +++ exited with 0 +++ [pid 5530] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5530, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 5241] rmdir("./3/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 5241] rmdir("./3" [pid 5240] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./3/file0", [pid 5241] <... rmdir resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] mkdir("./4", 0777 [pid 5240] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", [pid 5241] <... mkdir resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... openat resumed>) = 3 [pid 5240] getdents64(4, [pid 5242] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] ioctl(3, LOOP_CLR_FD [pid 5242] <... openat resumed>) = 3 [pid 5241] <... ioctl resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [ 124.123527][ T5536] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.152702][ T5535] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4 [pid 5242] newfstatat(3, "", [pid 5241] close(3 [pid 5240] <... close resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] rmdir("./3/file0") = 0 [pid 5242] getdents64(3, [pid 5240] getdents64(3, [pid 5241] <... close resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5240] close(3 [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... close resumed>) = 0 ./strace-static-x86_64: Process 5589 attached [pid 5242] unlink("./3/binderfs" [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 5589 [pid 5589] set_robust_list(0x55558b77b760, 24 [pid 5242] <... unlink resumed>) = 0 [pid 5240] rmdir("./3" [pid 5589] <... set_robust_list resumed>) = 0 [pid 5242] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... rmdir resumed>) = 0 [pid 5589] chdir("./4") = 0 [pid 5240] mkdir("./4", 0777 [pid 5589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5589] setpgid(0, 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5589] <... setpgid resumed>) = 0 [pid 5589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] <... openat resumed>) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5589] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5593 attached [pid 5589] write(3, "1000", 4 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5593 [pid 5589] <... write resumed>) = 4 [pid 5593] set_robust_list(0x55558b77b760, 24) = 0 [pid 5593] chdir("./4") = 0 [pid 5589] close(3 [pid 5593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5589] <... close resumed>) = 0 [pid 5593] <... prctl resumed>) = 0 [pid 5589] symlink("/dev/binderfs", "./binderfs" [pid 5593] setpgid(0, 0 [pid 5589] <... symlink resumed>) = 0 [pid 5593] <... setpgid resumed>) = 0 executing program [pid 5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5589] write(1, "executing program\n", 18) = 18 [pid 5589] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 124.174959][ T5536] BTRFS info (device loop3): using free-space-tree [ 124.194393][ T5535] BTRFS info (device loop4): using free-space-tree [pid 5593] <... openat resumed>) = 3 [pid 5589] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5593] write(3, "1000", 4 [pid 5589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5593] <... write resumed>) = 4 [pid 5589] <... mmap resumed>) = 0x7f511f01f000 [pid 5593] close(3 [pid 5589] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5593] <... close resumed>) = 0 [pid 5589] <... mprotect resumed>) = 0 [pid 5593] symlink("/dev/binderfs", "./binderfs" [pid 5589] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5593] <... symlink resumed>) = 0 [pid 5589] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}executing program ./strace-static-x86_64: Process 5605 attached [pid 5593] write(1, "executing program\n", 18 [pid 5605] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5593] <... write resumed>) = 18 [pid 5589] <... clone3 resumed> => {parent_tid=[5605]}, 88) = 5605 [pid 5589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5593] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5589] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5593] <... futex resumed>) = 0 [pid 5589] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5593] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5593] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5593] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5593] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5593] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5607 attached => {parent_tid=[5607]}, 88) = 5607 [pid 5593] rt_sigprocmask(SIG_SETMASK, [], [pid 5607] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5607] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5593] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] <... rseq resumed>) = 0 [pid 5593] <... futex resumed>) = 0 [pid 5605] set_robust_list(0x7f511f03f9a0, 24 [pid 5593] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5605] <... set_robust_list resumed>) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], [ 124.274162][ T5242] BTRFS info (device loop2): last unmount of filesystem 604c2e5d-c7f8-4d3e-bdad-a6ec5d827640 [pid 5607] memfd_create("syzkaller", 0) = 3 [pid 5605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5605] memfd_create("syzkaller", 0 [pid 5607] <... mmap resumed>) = 0x7f5116c00000 [pid 5605] <... memfd_create resumed>) = 3 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5536] <... mount resumed>) = 0 [pid 5536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5536] chdir("./file0") = 0 [pid 5536] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5536] close(4 [pid 5242] <... umount2 resumed>) = 0 [pid 5536] <... close resumed>) = 0 [pid 5242] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5536] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... futex resumed>) = 1 [pid 5536] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5533] <... futex resumed>) = 0 [pid 5242] newfstatat(AT_FDCWD, "./3/file0", [pid 5533] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5536] <... futex resumed>) = 0 [pid 5535] <... mount resumed>) = 0 [pid 5533] <... futex resumed>) = 1 [pid 5242] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5533] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5535] <... openat resumed>) = 3 [pid 5242] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5535] chdir("./file0" [pid 5242] <... openat resumed>) = 4 [pid 5536] <... openat resumed>) = 4 [pid 5535] <... chdir resumed>) = 0 [pid 5242] newfstatat(4, "", [pid 5535] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5536] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5535] <... openat resumed>) = 4 [pid 5533] <... futex resumed>) = 0 [pid 5242] getdents64(4, [pid 5535] ioctl(4, LOOP_CLR_FD [pid 5533] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5535] <... ioctl resumed>) = 0 [pid 5533] <... futex resumed>) = 0 [pid 5242] getdents64(4, [pid 5535] close(4 [pid 5533] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5535] <... close resumed>) = 0 [pid 5242] close(4 [pid 5535] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... close resumed>) = 0 [pid 5536] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5535] <... futex resumed>) = 1 [pid 5242] rmdir("./3/file0" [pid 5534] <... futex resumed>) = 0 [pid 5536] <... fallocate resumed>) = 0 [pid 5535] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] <... rmdir resumed>) = 0 [pid 5536] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5534] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] getdents64(3, [pid 5536] <... futex resumed>) = 1 [pid 5535] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5534] <... futex resumed>) = 0 [pid 5533] <... futex resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5536] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5535] <... openat resumed>) = 4 [pid 5534] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5533] exit_group(0 [pid 5536] <... futex resumed>) = ? [pid 5535] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5533] <... exit_group resumed>) = ? [pid 5242] close(3 [pid 5536] +++ exited with 0 +++ [pid 5535] <... futex resumed>) = 0 [pid 5534] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] +++ exited with 0 +++ [pid 5242] <... close resumed>) = 0 [pid 5535] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5534] <... futex resumed>) = 0 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5533, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5242] rmdir("./3" [pid 5535] <... fallocate resumed>) = 0 [pid 5534] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 5242] <... rmdir resumed>) = 0 [pid 5535] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... restart_syscall resumed>) = 0 [pid 5535] <... futex resumed>) = 0 [pid 5242] mkdir("./4", 0777 [pid 5535] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5534] exit_group(0 [pid 5535] <... futex resumed>) = ? [pid 5534] <... exit_group resumed>) = ? [pid 5242] <... mkdir resumed>) = 0 [pid 5535] +++ exited with 0 +++ [pid 5243] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... openat resumed>) = 3 [pid 5243] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5534] +++ exited with 0 +++ [pid 5243] <... openat resumed>) = 3 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5534, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 5243] newfstatat(3, "", [pid 5242] <... ioctl resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] close(3 [pid 5243] getdents64(3, [pid 5242] <... close resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5624 attached [pid 5243] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 5624 [pid 5243] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./3/binderfs") = 0 [pid 5243] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5624] set_robust_list(0x55558b77b760, 24 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5624] <... set_robust_list resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5624] chdir("./4" [pid 5244] <... openat resumed>) = 3 [pid 5244] newfstatat(3, "", [pid 5624] <... chdir resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] getdents64(3, [pid 5624] <... prctl resumed>) = 0 [pid 5624] setpgid(0, 0 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5624] <... setpgid resumed>) = 0 [pid 5244] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5624] write(3, "1000", 4 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5624] <... write resumed>) = 4 [pid 5244] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5624] close(3executing program ) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5624] symlink("/dev/binderfs", "./binderfs" [pid 5244] unlink("./3/binderfs" [pid 5624] <... symlink resumed>) = 0 [pid 5244] <... unlink resumed>) = 0 [pid 5624] write(1, "executing program\n", 18 [pid 5244] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5624] <... write resumed>) = 18 [pid 5624] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5624] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5624] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5625]}, 88) = 5625 [pid 5624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5624] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5624] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5625 attached [pid 5625] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5625] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] memfd_create("syzkaller", 0) = 3 [pid 5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 124.688964][ T5244] BTRFS info (device loop4): last unmount of filesystem ae315bb7-de20-435f-8385-2102b6a6c745 [ 124.715194][ T5243] BTRFS info (device loop3): last unmount of filesystem 30add80b-dc7a-48fe-9a5a-c6ca126a0e95 [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5605] <... write resumed>) = 16777216 [pid 5244] <... umount2 resumed>) = 0 [pid 5243] <... umount2 resumed>) = 0 [pid 5605] munmap(0x7f5116c00000, 138412032 [pid 5243] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5605] <... munmap resumed>) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", [pid 5243] newfstatat(AT_FDCWD, "./3/file0", [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] getdents64(4, [pid 5243] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] getdents64(4, [pid 5243] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] <... openat resumed>) = 4 [pid 5244] close(4 [pid 5243] newfstatat(4, "", [pid 5244] <... close resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] rmdir("./3/file0" [pid 5243] getdents64(4, [pid 5244] <... rmdir resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(3, [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./3/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./3") = 0 [pid 5243] mkdir("./4", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3 [pid 5605] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5243] <... close resumed>) = 0 [pid 5605] <... openat resumed>) = 4 [pid 5244] close(3 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5626 attached [pid 5605] ioctl(4, LOOP_SET_FD, 3 [pid 5244] <... close resumed>) = 0 [pid 5244] rmdir("./3" [pid 5625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5626] set_robust_list(0x55558b77b760, 24 [pid 5605] <... ioctl resumed>) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5626 [pid 5626] <... set_robust_list resumed>) = 0 [pid 5244] mkdir("./4", 0777 [pid 5626] chdir("./4" [pid 5244] <... mkdir resumed>) = 0 [pid 5626] <... chdir resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] <... openat resumed>) = 3 [pid 5626] <... prctl resumed>) = 0 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5626] setpgid(0, 0 [pid 5244] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5626] <... setpgid resumed>) = 0 [pid 5605] close(3 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] close(3 [pid 5626] <... openat resumed>) = 3 [pid 5605] <... close resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 5626] write(3, "1000", 4 [pid 5605] close(4 [pid 5626] <... write resumed>) = 4 [pid 5605] <... close resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5605] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 5627 attached [pid 5626] close(3 [pid 5605] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5627 [ 125.154761][ T5605] loop1: detected capacity change from 0 to 32768 [pid 5626] <... close resumed>) = 0 [pid 5627] set_robust_list(0x55558b77b760, 24) = 0 [pid 5627] chdir("./4") = 0 [pid 5627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5626] write(1, "executing program\n", 18 [pid 5627] <... prctl resumed>) = 0 [pid 5626] <... write resumed>) = 18 [pid 5627] setpgid(0, 0 [pid 5626] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] <... setpgid resumed>) = 0 [pid 5626] <... futex resumed>) = 0 [pid 5627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5626] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5626] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}executing program [pid 5627] <... openat resumed>) = 3 [pid 5626] <... clone3 resumed> => {parent_tid=[5628]}, 88) = 5628 [pid 5627] write(3, "1000", 4 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], [pid 5627] <... write resumed>) = 4 [pid 5626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5627] close(3) = 0 ./strace-static-x86_64: Process 5628 attached [pid 5627] symlink("/dev/binderfs", "./binderfs" [pid 5626] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] <... symlink resumed>) = 0 [pid 5626] <... futex resumed>) = 0 [pid 5627] write(1, "executing program\n", 18 [pid 5626] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5627] <... write resumed>) = 18 [pid 5627] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5627] <... futex resumed>) = 0 [pid 5628] <... rseq resumed>) = 0 [pid 5627] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5628] set_robust_list(0x7f511f03f9a0, 24 [pid 5627] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5628] <... set_robust_list resumed>) = 0 [pid 5627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5628] rt_sigprocmask(SIG_SETMASK, [], [pid 5627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5628] memfd_create("syzkaller", 0 [pid 5627] <... mmap resumed>) = 0x7f511f01f000 [pid 5628] <... memfd_create resumed>) = 3 [pid 5627] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5627] <... mprotect resumed>) = 0 [pid 5628] <... mmap resumed>) = 0x7f5116c00000 [pid 5627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5629]}, 88) = 5629 [pid 5627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5627] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5629 attached [pid 5627] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5629] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [ 125.192145][ T5605] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5605) [pid 5629] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5629] memfd_create("syzkaller", 0) = 3 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 125.252922][ T5605] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 125.278681][ T5605] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 125.306335][ T5605] BTRFS info (device loop1): using free-space-tree [pid 5607] <... write resumed>) = 16777216 [pid 5607] munmap(0x7f5116c00000, 138412032) = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5607] close(3) = 0 [pid 5607] close(4) = 0 [ 125.435685][ T5607] loop0: detected capacity change from 0 to 32768 [pid 5607] mkdir("./file0", 0777) = 0 [pid 5607] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5605] <... mount resumed>) = 0 [pid 5605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5605] chdir("./file0") = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5605] ioctl(4, LOOP_CLR_FD) = 0 [pid 5605] close(4) = 0 [pid 5605] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5605] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] <... futex resumed>) = 0 [pid 5589] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... futex resumed>) = 0 [pid 5589] <... futex resumed>) = 1 [pid 5605] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5589] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... openat resumed>) = 4 [pid 5605] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 125.485022][ T5607] BTRFS: device /dev/loop0 (7:0) using temp-fsid 8ded5f99-082b-417e-a5d5-35d5636a18fa [ 125.513017][ T5607] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5607) [pid 5589] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... futex resumed>) = 0 [pid 5589] <... futex resumed>) = 1 [pid 5605] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5589] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... fallocate resumed>) = 0 [pid 5605] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5589] exit_group(0 [pid 5605] <... futex resumed>) = ? [pid 5589] <... exit_group resumed>) = ? [pid 5605] +++ exited with 0 +++ [pid 5589] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5589, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5241] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 125.558699][ T5607] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 125.582667][ T5607] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 125.599879][ T5607] BTRFS info (device loop0): using free-space-tree [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./4/binderfs") = 0 [pid 5241] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5625] <... write resumed>) = 16777216 [ 125.706047][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5625] munmap(0x7f5116c00000, 138412032) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5625] ioctl(4, LOOP_SET_FD, 3 [pid 5607] <... mount resumed>) = 0 [pid 5607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5607] chdir("./file0") = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5607] ioctl(4, LOOP_CLR_FD) = 0 [pid 5625] <... ioctl resumed>) = 0 [pid 5625] close(3) = 0 [pid 5625] close(4) = 0 [pid 5625] mkdir("./file0", 0777) = 0 [pid 5607] close(4) = 0 [pid 5607] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5607] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5593] <... futex resumed>) = 0 [ 125.825513][ T5625] loop2: detected capacity change from 0 to 32768 [pid 5593] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5607] <... futex resumed>) = 0 [pid 5607] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5593] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] <... openat resumed>) = 4 [pid 5607] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... write resumed>) = 16777216 [pid 5607] <... futex resumed>) = 0 [pid 5593] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5593] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5628] munmap(0x7f5116c00000, 138412032 [pid 5607] <... fallocate resumed>) = 0 [pid 5607] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5593] <... futex resumed>) = 0 [pid 5607] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5593] exit_group(0 [pid 5607] <... futex resumed>) = ? [pid 5593] <... exit_group resumed>) = ? [pid 5607] +++ exited with 0 +++ [pid 5593] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./4/binderfs") = 0 [ 125.863427][ T5625] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5625) [pid 5240] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5628] <... munmap resumed>) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 125.915172][ T5625] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 125.939831][ T5625] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 125.950372][ T5625] BTRFS info (device loop2): using free-space-tree [pid 5628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5628] close(3) = 0 [pid 5628] close(4) = 0 [pid 5628] mkdir("./file0", 0777) = 0 [ 125.959838][ T5240] BTRFS info (device loop0): last unmount of filesystem 8ded5f99-082b-417e-a5d5-35d5636a18fa [ 125.963067][ T5628] loop3: detected capacity change from 0 to 32768 [pid 5628] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./4/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./4") = 0 [pid 5241] mkdir("./5", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5675 attached [pid 5675] set_robust_list(0x55558b77b760, 24) = 0 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 5675 [pid 5675] chdir("./5") = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5675] setpgid(0, 0) = 0 [ 126.025223][ T5628] BTRFS: device /dev/loop3 (7:3) using temp-fsid f495075b-7e75-451f-9fca-d8d9061c513a [ 126.051541][ T5628] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5628) [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5675] write(3, "1000", 4) = 4 [pid 5675] close(3) = 0 [pid 5675] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5675] write(1, "executing program\n", 18) = 18 [pid 5675] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5675] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5675] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5629] <... write resumed>) = 16777216 [pid 5675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5629] munmap(0x7f5116c00000, 138412032./strace-static-x86_64: Process 5677 attached [pid 5675] <... clone3 resumed> => {parent_tid=[5677]}, 88) = 5677 [pid 5629] <... munmap resumed>) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], [pid 5629] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5675] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... openat resumed>) = 4 [pid 5675] <... futex resumed>) = 0 [pid 5629] ioctl(4, LOOP_SET_FD, 3 [pid 5675] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 126.135302][ T5628] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5677] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5677] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5629] <... ioctl resumed>) = 0 [pid 5625] <... mount resumed>) = 0 [pid 5629] close(3 [pid 5625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5629] <... close resumed>) = 0 [pid 5629] close(4) = 0 [pid 5629] mkdir("./file0", 0777 [pid 5625] <... openat resumed>) = 3 [pid 5629] <... mkdir resumed>) = 0 [pid 5625] chdir("./file0" [pid 5629] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5625] <... chdir resumed>) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5625] ioctl(4, LOOP_CLR_FD) = 0 [pid 5625] close(4) = 0 [pid 5625] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5624] <... futex resumed>) = 0 [pid 5624] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.179446][ T5629] loop4: detected capacity change from 0 to 32768 [ 126.206280][ T5628] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 5625] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5624] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5625] <... openat resumed>) = 4 [pid 5625] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5624] <... futex resumed>) = 0 [pid 5624] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5624] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 126.223680][ T5629] BTRFS: device /dev/loop4 (7:4) using temp-fsid 50170727-58b3-4cf0-b945-0607a4631828 [pid 5625] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5625] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5624] <... futex resumed>) = 0 [pid 5624] exit_group(0) = ? [pid 5625] +++ exited with 0 +++ [pid 5624] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5624, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [ 126.252692][ T5629] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5629) [ 126.253352][ T5628] BTRFS info (device loop3): using free-space-tree [pid 5242] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./4/binderfs") = 0 [pid 5242] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 126.319086][ T5629] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5240] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./4/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./4") = 0 [ 126.373164][ T5629] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 126.393288][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5240] mkdir("./5", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5694 attached [pid 5694] set_robust_list(0x55558b77b760, 24 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5694 [pid 5694] <... set_robust_list resumed>) = 0 [pid 5694] chdir("./5") = 0 [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5694] setpgid(0, 0) = 0 [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5694] write(3, "1000", 4) = 4 [pid 5694] close(3) = 0 [pid 5694] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5694] write(1, "executing program\n", 18) = 18 [pid 5694] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [ 126.427983][ T5629] BTRFS info (device loop4): using free-space-tree [pid 5694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5694] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5694] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5707 attached => {parent_tid=[5707]}, 88) = 5707 [pid 5694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5694] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5694] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5707] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5628] <... mount resumed>) = 0 [pid 5707] <... rseq resumed>) = 0 [pid 5707] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5707] memfd_create("syzkaller", 0 [pid 5628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5707] <... memfd_create resumed>) = 3 [pid 5628] chdir("./file0" [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5628] <... chdir resumed>) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5628] ioctl(4, LOOP_CLR_FD) = 0 [pid 5628] close(4) = 0 [pid 5628] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = 0 [pid 5628] <... futex resumed>) = 1 [pid 5626] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5626] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] <... openat resumed>) = 4 [pid 5628] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5626] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5626] <... futex resumed>) = 0 [pid 5628] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5626] exit_group(0 [pid 5628] <... futex resumed>) = ? [pid 5626] <... exit_group resumed>) = ? [pid 5628] +++ exited with 0 +++ [pid 5626] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5243] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./4/binderfs") = 0 [pid 5243] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5629] <... mount resumed>) = 0 [pid 5629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5629] chdir("./file0") = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5629] ioctl(4, LOOP_CLR_FD) = 0 [pid 5629] close(4) = 0 [pid 5629] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5627] <... futex resumed>) = 0 [pid 5629] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5627] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... openat resumed>) = 4 [pid 5627] <... futex resumed>) = 0 [pid 5629] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] <... futex resumed>) = 0 [pid 5627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5627] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5629] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5627] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... umount2 resumed>) = 0 [pid 5629] <... fallocate resumed>) = 0 [pid 5629] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5629] <... futex resumed>) = 1 [pid 5627] <... futex resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5629] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5627] exit_group(0 [pid 5242] newfstatat(AT_FDCWD, "./4/file0", [pid 5627] <... exit_group resumed>) = ? [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5629] <... futex resumed>) = ? [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5629] +++ exited with 0 +++ [pid 5627] +++ exited with 0 +++ [pid 5242] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5627, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5242] <... openat resumed>) = 4 [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... restart_syscall resumed>) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, [pid 5242] getdents64(4, [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./4/file0" [pid 5244] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] <... rmdir resumed>) = 0 [pid 5242] getdents64(3, [pid 5244] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3 [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... close resumed>) = 0 [pid 5242] rmdir("./4" [pid 5244] unlink("./4/binderfs" [pid 5242] <... rmdir resumed>) = 0 [pid 5242] mkdir("./5", 0777 [pid 5244] <... unlink resumed>) = 0 [pid 5242] <... mkdir resumed>) = 0 [pid 5244] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5713 ./strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x55558b77b760, 24) = 0 [pid 5713] chdir("./5") = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [ 126.688786][ T5243] BTRFS info (device loop3): last unmount of filesystem f495075b-7e75-451f-9fca-d8d9061c513a [pid 5713] close(3) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5713] write(1, "executing program\n", 18) = 18 [pid 5713] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5713] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... umount2 resumed>) = 0 [pid 5713] <... mprotect resumed>) = 0 [pid 5243] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] newfstatat(AT_FDCWD, "./4/file0", ./strace-static-x86_64: Process 5715 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5713] <... clone3 resumed> => {parent_tid=[5715]}, 88) = 5715 [pid 5243] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5713] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5715] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5713] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... openat resumed>) = 4 [pid 5713] <... futex resumed>) = 0 [pid 5713] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5715] <... rseq resumed>) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5715] set_robust_list(0x7f511f03f9a0, 24 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5715] <... set_robust_list resumed>) = 0 [pid 5243] close(4 [pid 5715] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... close resumed>) = 0 [pid 5715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5715] memfd_create("syzkaller", 0 [pid 5243] rmdir("./4/file0" [pid 5715] <... memfd_create resumed>) = 3 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5243] <... rmdir resumed>) = 0 [pid 5243] getdents64(3, [pid 5715] <... mmap resumed>) = 0x7f5116c00000 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [ 126.774026][ T5244] BTRFS info (device loop4): last unmount of filesystem 50170727-58b3-4cf0-b945-0607a4631828 [pid 5243] rmdir("./4") = 0 [pid 5243] mkdir("./5", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5717 attached , child_tidptr=0x55558b77b750) = 5717 [pid 5717] set_robust_list(0x55558b77b760, 24) = 0 [pid 5717] chdir("./5") = 0 [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5717] setpgid(0, 0) = 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5717] write(3, "1000", 4) = 4 [pid 5717] close(3) = 0 [pid 5717] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5717] write(1, "executing program\n", 18) = 18 [pid 5717] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5717] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5717] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5717] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5718 attached => {parent_tid=[5718]}, 88) = 5718 [pid 5717] rt_sigprocmask(SIG_SETMASK, [], [pid 5718] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5718] <... rseq resumed>) = 0 [pid 5717] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] set_robust_list(0x7f511f03f9a0, 24 [pid 5717] <... futex resumed>) = 0 [pid 5718] <... set_robust_list resumed>) = 0 [pid 5717] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5718] memfd_create("syzkaller", 0) = 3 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, [pid 5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./4/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./4") = 0 [pid 5244] mkdir("./5", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5677] <... write resumed>) = 16777216 [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5677] munmap(0x7f5116c00000, 138412032 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5719 ./strace-static-x86_64: Process 5719 attached [pid 5719] set_robust_list(0x55558b77b760, 24) = 0 [pid 5719] chdir("./5") = 0 [pid 5719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5719] setpgid(0, 0) = 0 [pid 5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5719] write(3, "1000", 4) = 4 [pid 5719] close(3) = 0 [pid 5719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5719] write(1, "executing program\n", 18executing program ) = 18 [pid 5719] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5719] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5677] <... munmap resumed>) = 0 [pid 5719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5719] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5720 attached => {parent_tid=[5720]}, 88) = 5720 [pid 5719] rt_sigprocmask(SIG_SETMASK, [], [pid 5720] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5677] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5677] <... openat resumed>) = 4 [pid 5677] ioctl(4, LOOP_SET_FD, 3 [pid 5720] <... rseq resumed>) = 0 [pid 5720] set_robust_list(0x7f511f03f9a0, 24 [pid 5719] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5720] <... set_robust_list resumed>) = 0 [pid 5719] <... futex resumed>) = 0 [pid 5720] rt_sigprocmask(SIG_SETMASK, [], [pid 5719] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5720] memfd_create("syzkaller", 0) = 3 [pid 5720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5677] <... ioctl resumed>) = 0 [ 127.213525][ T5677] loop1: detected capacity change from 0 to 32768 [pid 5677] close(3) = 0 [pid 5677] close(4 [pid 5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5677] <... close resumed>) = 0 [pid 5677] mkdir("./file0", 0777) = 0 [ 127.281888][ T5677] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5677) [pid 5677] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 127.362589][ T5677] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 127.413151][ T5677] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 127.421839][ T5677] BTRFS info (device loop1): using free-space-tree [pid 5718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5707] <... write resumed>) = 16777216 [pid 5707] munmap(0x7f5116c00000, 138412032) = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5707] ioctl(4, LOOP_SET_FD, 3 [pid 5715] <... write resumed>) = 16777216 [pid 5707] <... ioctl resumed>) = 0 [pid 5707] close(3) = 0 [pid 5677] <... mount resumed>) = 0 [ 127.610130][ T5707] loop0: detected capacity change from 0 to 32768 [pid 5707] close(4 [pid 5720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5715] munmap(0x7f5116c00000, 138412032 [pid 5677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5677] chdir("./file0") = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5677] ioctl(4, LOOP_CLR_FD) = 0 [pid 5677] close(4) = 0 [pid 5677] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5677] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5677] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5675] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5677] <... openat resumed>) = 4 [pid 5707] <... close resumed>) = 0 [pid 5677] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] mkdir("./file0", 0777 [pid 5677] <... futex resumed>) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5707] <... mkdir resumed>) = 0 [pid 5677] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5675] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5677] <... fallocate resumed>) = 0 [pid 5675] <... futex resumed>) = 0 [pid 5677] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5715] <... munmap resumed>) = 0 [pid 5677] <... futex resumed>) = 0 [pid 5675] exit_group(0) = ? [pid 5677] +++ exited with 0 +++ [pid 5675] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5675, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 5715] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5241] <... restart_syscall resumed>) = 0 [pid 5241] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5715] <... openat resumed>) = 4 [ 127.705101][ T5707] BTRFS: device /dev/loop0 (7:0) using temp-fsid 1f0dab1a-a41d-4e45-83d9-90980866f538 [pid 5241] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5715] ioctl(4, LOOP_SET_FD, 3 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./5/binderfs") = 0 [pid 5241] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5715] <... ioctl resumed>) = 0 [pid 5715] close(3) = 0 [pid 5715] close(4) = 0 [pid 5715] mkdir("./file0", 0777) = 0 [ 127.747661][ T5715] loop2: detected capacity change from 0 to 32768 [ 127.756766][ T5707] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5707) [ 127.801712][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 127.831005][ T5715] BTRFS: device /dev/loop2 (7:2) using temp-fsid f30ace2f-7c28-4193-8ae4-120a653c1804 [ 127.841398][ T5707] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 127.875423][ T5715] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5715) [ 127.893975][ T5707] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 5715] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5718] <... write resumed>) = 16777216 [ 127.925966][ T5707] BTRFS info (device loop0): using free-space-tree [ 127.944735][ T5715] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 127.963105][ T5715] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 5718] munmap(0x7f5116c00000, 138412032) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5718] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5718] close(3) = 0 [pid 5718] close(4) = 0 [pid 5718] mkdir("./file0", 0777) = 0 [ 127.971753][ T5715] BTRFS info (device loop2): using free-space-tree [ 127.984833][ T5718] loop3: detected capacity change from 0 to 32768 [ 128.008136][ T5718] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5718) [ 128.079453][ T5718] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 128.112667][ T5718] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 5718] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5720] <... write resumed>) = 16777216 [ 128.152877][ T5718] BTRFS info (device loop3): using free-space-tree [pid 5720] munmap(0x7f5116c00000, 138412032) = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5720] close(3) = 0 [pid 5720] close(4) = 0 [pid 5720] mkdir("./file0", 0777 [pid 5241] <... umount2 resumed>) = 0 [pid 5720] <... mkdir resumed>) = 0 [pid 5241] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5720] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 128.230793][ T5720] loop4: detected capacity change from 0 to 32768 [pid 5241] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./5/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./5") = 0 [pid 5241] mkdir("./6", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [ 128.273376][ T5720] BTRFS: device /dev/loop4 (7:4) using temp-fsid 546ae29f-f4c3-44aa-a8ed-8674fa1a7736 [ 128.300917][ T5720] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5720) [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5770 attached , child_tidptr=0x55558b77b750) = 5770 [pid 5770] set_robust_list(0x55558b77b760, 24) = 0 [pid 5770] chdir("./6") = 0 [pid 5770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5770] setpgid(0, 0) = 0 [pid 5707] <... mount resumed>) = 0 [pid 5707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5707] chdir("./file0") = 0 [pid 5770] <... openat resumed>) = 3 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5770] write(3, "1000", 4 [pid 5707] ioctl(4, LOOP_CLR_FD) = 0 [pid 5770] <... write resumed>) = 4 [pid 5707] close(4 [pid 5770] close(3) = 0 [pid 5770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5715] <... mount resumed>) = 0 [pid 5770] write(1, "executing program\n", 18 [pid 5715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5770] <... write resumed>) = 18 [pid 5715] <... openat resumed>) = 3 [pid 5715] chdir("./file0") = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5707] <... close resumed>) = 0 [pid 5770] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5715] <... openat resumed>) = 4 [pid 5707] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 5770] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5715] ioctl(4, LOOP_CLR_FD [pid 5707] <... futex resumed>) = 1 [pid 5694] <... futex resumed>) = 0 [pid 5770] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5715] <... ioctl resumed>) = 0 [pid 5707] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5694] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5715] close(4) = 0 [pid 5715] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5713] <... futex resumed>) = 0 [pid 5715] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5713] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... openat resumed>) = 4 [pid 5694] <... futex resumed>) = 0 [pid 5770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5713] <... futex resumed>) = 0 [pid 5694] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5715] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5713] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5770] <... mmap resumed>) = 0x7f511f01f000 [pid 5715] <... openat resumed>) = 4 [pid 5715] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5713] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.329914][ T5720] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 128.341811][ T5720] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 128.356527][ T5720] BTRFS info (device loop4): using free-space-tree [pid 5713] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5715] <... futex resumed>) = 1 [pid 5770] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5707] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] <... mprotect resumed>) = 0 [pid 5718] <... mount resumed>) = 0 [pid 5715] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5707] <... futex resumed>) = 1 [pid 5694] <... futex resumed>) = 0 [pid 5770] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5715] <... fallocate resumed>) = 0 [pid 5707] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5718] <... openat resumed>) = 3 [pid 5715] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5694] <... futex resumed>) = 0 [pid 5770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5718] chdir("./file0" [pid 5715] <... futex resumed>) = 1 [pid 5713] <... futex resumed>) = 0 [pid 5707] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5694] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... chdir resumed>) = 0 [pid 5715] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5718] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5713] exit_group(0 [pid 5718] <... openat resumed>) = 4 [pid 5707] <... fallocate resumed>) = 0 ./strace-static-x86_64: Process 5794 attached [pid 5718] ioctl(4, LOOP_CLR_FD [pid 5715] <... futex resumed>) = ? [pid 5713] <... exit_group resumed>) = ? [pid 5794] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5770] <... clone3 resumed> => {parent_tid=[5794]}, 88) = 5794 [pid 5718] <... ioctl resumed>) = 0 [pid 5715] +++ exited with 0 +++ [pid 5713] +++ exited with 0 +++ [pid 5707] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] <... rseq resumed>) = 0 [pid 5770] rt_sigprocmask(SIG_SETMASK, [], [pid 5718] close(4 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5713, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=25 /* 0.25 s */} --- [pid 5718] <... close resumed>) = 0 [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 5718] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... restart_syscall resumed>) = 0 [pid 5718] <... futex resumed>) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5707] <... futex resumed>) = 1 [pid 5694] <... futex resumed>) = 0 [pid 5794] set_robust_list(0x7f511f03f9a0, 24 [pid 5770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5718] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] exit_group(0 [pid 5794] <... set_robust_list resumed>) = 0 [pid 5770] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] rt_sigprocmask(SIG_SETMASK, [], [pid 5770] <... futex resumed>) = 0 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5717] <... futex resumed>) = 0 [pid 5242] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5770] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5718] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5717] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... futex resumed>) = ? [pid 5694] <... exit_group resumed>) = ? [pid 5794] memfd_create("syzkaller", 0 [pid 5718] <... openat resumed>) = 4 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5794] <... memfd_create resumed>) = 3 [pid 5718] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] +++ exited with 0 +++ [pid 5794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5718] <... futex resumed>) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5794] <... mmap resumed>) = 0x7f5116c00000 [pid 5718] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5717] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... fallocate resumed>) = 0 [pid 5717] <... futex resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5718] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... futex resumed>) = 0 [pid 5242] newfstatat(3, "", [pid 5718] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5717] exit_group(0 [pid 5718] <... futex resumed>) = ? [pid 5717] <... exit_group resumed>) = ? [pid 5718] +++ exited with 0 +++ [pid 5717] +++ exited with 0 +++ [pid 5694] +++ exited with 0 +++ [pid 5242] getdents64(3, [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5694, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5717, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=28 /* 0.28 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5243] <... openat resumed>) = 3 [pid 5243] newfstatat(3, "", [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] unlink("./5/binderfs" [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] <... unlink resumed>) = 0 [pid 5243] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] unlink("./5/binderfs") = 0 [pid 5240] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./5/binderfs") = 0 [ 128.565396][ T5240] BTRFS info (device loop0): last unmount of filesystem 1f0dab1a-a41d-4e45-83d9-90980866f538 [ 128.565624][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 128.587335][ T5242] BTRFS info (device loop2): last unmount of filesystem f30ace2f-7c28-4193-8ae4-120a653c1804 [pid 5240] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5720] <... mount resumed>) = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 5720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5720] chdir("./file0") = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5720] ioctl(4, LOOP_CLR_FD) = 0 [pid 5720] close(4) = 0 [pid 5720] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5719] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5719] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5720] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5720] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5719] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5719] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5720] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5720] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5719] exit_group(0) = ? [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... umount2 resumed>) = 0 [pid 5240] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] <... openat resumed>) = 4 [pid 5242] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] newfstatat(4, "", [pid 5242] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] getdents64(4, [pid 5242] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5720] +++ exited with 0 +++ [pid 5719] +++ exited with 0 +++ [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] <... openat resumed>) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5719, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./5/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./5" [pid 5244] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... rmdir resumed>) = 0 [pid 5240] close(4 [pid 5242] mkdir("./6", 0777 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... mkdir resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] rmdir("./5/file0" [pid 5244] <... openat resumed>) = 3 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5244] newfstatat(3, "", [pid 5242] <... ioctl resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, [pid 5244] getdents64(3, [pid 5242] close(3 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] <... close resumed>) = 0 [pid 5240] close(3 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] <... close resumed>) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] rmdir("./5"./strace-static-x86_64: Process 5806 attached [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./6", 0777 [pid 5244] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 5806 [pid 5806] set_robust_list(0x55558b77b760, 24 [pid 5240] <... mkdir resumed>) = 0 [pid 5806] <... set_robust_list resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5806] chdir("./6" [pid 5244] unlink("./5/binderfs" [pid 5240] <... openat resumed>) = 3 [pid 5806] <... chdir resumed>) = 0 [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5806] setpgid(0, 0 [pid 5244] <... unlink resumed>) = 0 [pid 5240] <... ioctl resumed>) = 0 [pid 5806] <... setpgid resumed>) = 0 [pid 5240] close(3 [pid 5806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] <... close resumed>) = 0 [pid 5806] <... openat resumed>) = 3 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5806] write(3, "1000", 4) = 4 [pid 5806] close(3) = 0 [pid 5806] symlink("/dev/binderfs", "./binderfs" [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 5807 ./strace-static-x86_64: Process 5807 attached [pid 5244] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5806] <... symlink resumed>) = 0 [pid 5807] set_robust_list(0x55558b77b760, 24 [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5807] <... set_robust_list resumed>) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5806] write(1, "executing program\n", 18 [pid 5243] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 5807] chdir("./6" [pid 5806] <... write resumed>) = 18 [pid 5243] <... openat resumed>) = 4 [pid 5807] <... chdir resumed>) = 0 [pid 5806] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5243] newfstatat(4, "", [pid 5806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] getdents64(4, [pid 5806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5806] <... mmap resumed>) = 0x7f511f01f000 [pid 5243] getdents64(4, [pid 5806] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5806] <... mprotect resumed>) = 0 [pid 5243] close(4) = 0 [pid 5806] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] rmdir("./5/file0" [pid 5806] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 5806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5806] <... clone3 resumed> => {parent_tid=[5808]}, 88) = 5808 [pid 5243] close(3 [pid 5806] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... close resumed>) = 0 [pid 5806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] rmdir("./5" [pid 5806] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... rmdir resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5243] mkdir("./6", 0777 [pid 5806] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5808 attached [pid 5807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5807] <... prctl resumed>) = 0 [pid 5243] <... openat resumed>) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5807] setpgid(0, 0 [pid 5808] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5807] <... setpgid resumed>) = 0 [pid 5807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5808] <... rseq resumed>) = 0 [pid 5243] close(3) = 0 [pid 5807] <... openat resumed>) = 3 [pid 5808] set_robust_list(0x7f511f03f9a0, 24 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 5808] <... set_robust_list resumed>) = 0 [pid 5807] write(3, "1000", 4 [pid 5808] rt_sigprocmask(SIG_SETMASK, [], [pid 5807] <... write resumed>) = 4 [pid 5808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5807] close(3 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5809 [pid 5808] memfd_create("syzkaller", 0 [pid 5807] <... close resumed>) = 0 ./strace-static-x86_64: Process 5809 attached [pid 5809] set_robust_list(0x55558b77b760, 24) = 0 [pid 5809] chdir("./6" [pid 5808] <... memfd_create resumed>) = 3 [pid 5807] symlink("/dev/binderfs", "./binderfs" [pid 5809] <... chdir resumed>) = 0 [pid 5809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5809] setpgid(0, 0) = 0 [pid 5809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5807] <... symlink resumed>) = 0 [pid 5809] <... openat resumed>) = 3 [pid 5808] <... mmap resumed>) = 0x7f5116c00000 [pid 5807] write(1, "executing program\n", 18 [pid 5809] write(3, "1000", 4 [pid 5807] <... write resumed>) = 18 [pid 5809] <... write resumed>) = 4 [pid 5809] close(3) = 0 [pid 5807] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, executing program [pid 5809] symlink("/dev/binderfs", "./binderfs" [pid 5807] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5807] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5809] <... symlink resumed>) = 0 [pid 5807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5809] write(1, "executing program\n", 18 [pid 5807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5809] <... write resumed>) = 18 [pid 5809] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5809] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5807] <... mmap resumed>) = 0x7f511f01f000 [pid 5809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5807] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5807] <... mprotect resumed>) = 0 [pid 5809] <... mmap resumed>) = 0x7f511f01f000 [pid 5807] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5809] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5807] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5809] <... mprotect resumed>) = 0 [pid 5807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5810 attached [pid 5809] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5810] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5809] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5807] <... clone3 resumed> => {parent_tid=[5810]}, 88) = 5810 [pid 5810] <... rseq resumed>) = 0 [pid 5807] rt_sigprocmask(SIG_SETMASK, [], [ 128.789257][ T5244] BTRFS info (device loop4): last unmount of filesystem 546ae29f-f4c3-44aa-a8ed-8674fa1a7736 [pid 5809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5807] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5811 attached [pid 5810] set_robust_list(0x7f511f03f9a0, 24 [pid 5807] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] <... clone3 resumed> => {parent_tid=[5811]}, 88) = 5811 [pid 5807] <... futex resumed>) = 0 [pid 5810] <... set_robust_list resumed>) = 0 [pid 5809] rt_sigprocmask(SIG_SETMASK, [], [pid 5811] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5807] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5810] rt_sigprocmask(SIG_SETMASK, [], [pid 5809] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5811] <... rseq resumed>) = 0 [pid 5809] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5811] set_robust_list(0x7f511f03f9a0, 24 [pid 5810] memfd_create("syzkaller", 0) = 3 [pid 5810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5811] <... set_robust_list resumed>) = 0 [pid 5811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5811] memfd_create("syzkaller", 0) = 3 [pid 5811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5810] <... mmap resumed>) = 0x7f5116c00000 [pid 5794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./5/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./5") = 0 [pid 5244] mkdir("./6", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5812 attached , child_tidptr=0x55558b77b750) = 5812 [pid 5812] set_robust_list(0x55558b77b760, 24) = 0 [pid 5812] chdir("./6") = 0 [pid 5812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5812] setpgid(0, 0) = 0 [pid 5812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5812] write(3, "1000", 4) = 4 [pid 5812] close(3) = 0 [pid 5812] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5812] write(1, "executing program\n", 18) = 18 [pid 5812] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5812] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5812] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5812] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5813 attached => {parent_tid=[5813]}, 88) = 5813 [pid 5812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5812] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5813] <... rseq resumed>) = 0 [pid 5813] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] memfd_create("syzkaller", 0) = 3 [pid 5813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5794] <... write resumed>) = 16777216 [pid 5794] munmap(0x7f5116c00000, 138412032) = 0 [pid 5794] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5794] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5794] close(3) = 0 [pid 5794] close(4) = 0 [ 129.629248][ T5794] loop1: detected capacity change from 0 to 32768 [pid 5794] mkdir("./file0", 0777) = 0 [ 129.717523][ T5794] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5794) [ 129.803015][ T5794] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5794] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5808] <... write resumed>) = 16777216 [pid 5813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5811] <... write resumed>) = 16777216 [pid 5811] munmap(0x7f5116c00000, 138412032 [pid 5808] munmap(0x7f5116c00000, 138412032 [pid 5810] <... write resumed>) = 16777216 [pid 5811] <... munmap resumed>) = 0 [pid 5808] <... munmap resumed>) = 0 [pid 5811] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 129.850655][ T5794] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.873028][ T5794] BTRFS info (device loop1): using free-space-tree [pid 5811] ioctl(4, LOOP_SET_FD, 3 [pid 5810] munmap(0x7f5116c00000, 138412032 [pid 5808] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5808] ioctl(4, LOOP_SET_FD, 3 [pid 5811] <... ioctl resumed>) = 0 [pid 5808] <... ioctl resumed>) = 0 [pid 5811] close(3) = 0 [pid 5811] close(4) = 0 [pid 5811] mkdir("./file0", 0777) = 0 [pid 5811] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5810] <... munmap resumed>) = 0 [pid 5808] close(3) = 0 [pid 5808] close(4) = 0 [pid 5808] mkdir("./file0", 0777) = 0 [ 129.915908][ T5811] loop3: detected capacity change from 0 to 32768 [ 129.924097][ T5808] loop2: detected capacity change from 0 to 32768 [ 129.945116][ T5811] BTRFS: device /dev/loop3 (7:3) using temp-fsid 5e1d4f39-9d5b-4003-aefd-a813ab28ada7 [pid 5808] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5810] ioctl(4, LOOP_SET_FD, 3) = 0 [ 129.983321][ T5811] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5811) [ 130.005870][ T5810] loop0: detected capacity change from 0 to 32768 [pid 5810] close(3) = 0 [pid 5810] close(4) = 0 [pid 5810] mkdir("./file0", 0777) = 0 [ 130.026246][ T5808] BTRFS: device /dev/loop2 (7:2) using temp-fsid 3a9e13c8-9a43-48af-9ab3-3320e54b52bf [ 130.037861][ T5811] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5810] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5813] <... write resumed>) = 16777216 [ 130.076575][ T5808] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5808) [ 130.094649][ T5811] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 130.105750][ T5811] BTRFS info (device loop3): using free-space-tree [pid 5813] munmap(0x7f5116c00000, 138412032) = 0 [pid 5813] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5813] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5813] close(3) = 0 [ 130.130361][ T5810] BTRFS: device /dev/loop0 (7:0) using temp-fsid 986fe253-bca7-4719-9210-e4dc7f758b75 [ 130.142480][ T5813] loop4: detected capacity change from 0 to 32768 [ 130.149959][ T5810] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5810) [ 130.152966][ T5808] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5813] close(4) = 0 [pid 5813] mkdir("./file0", 0777) = 0 [ 130.175081][ T5808] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 130.199556][ T5813] BTRFS: device /dev/loop4 (7:4) using temp-fsid 2b1707a9-8dc6-4d8c-93f2-5c0d0e881591 [ 130.212691][ T5810] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 130.225279][ T5808] BTRFS info (device loop2): using free-space-tree [ 130.232038][ T5813] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5813) [ 130.246988][ T5810] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 130.256874][ T5810] BTRFS info (device loop0): using free-space-tree [ 130.274164][ T5813] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5813] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5794] <... mount resumed>) = 0 [pid 5794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5794] chdir("./file0") = 0 [pid 5794] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5794] ioctl(4, LOOP_CLR_FD) = 0 [pid 5794] close(4) = 0 [pid 5794] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] <... futex resumed>) = 0 [pid 5770] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5794] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5770] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5794] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5770] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5770] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5794] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5794] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5770] exit_group(0 [pid 5794] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] <... exit_group resumed>) = ? [pid 5794] <... futex resumed>) = ? [pid 5794] +++ exited with 0 +++ [pid 5770] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5770, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=30 /* 0.30 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5811] <... mount resumed>) = 0 [pid 5241] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] <... openat resumed>) = 3 [pid 5811] chdir("./file0") = 0 [pid 5241] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5811] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5241] <... openat resumed>) = 3 [pid 5241] newfstatat(3, "", [pid 5811] <... openat resumed>) = 4 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, [pid 5811] ioctl(4, LOOP_CLR_FD [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5811] <... ioctl resumed>) = 0 [pid 5241] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5811] close(4) = 0 [pid 5811] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5809] <... futex resumed>) = 0 [pid 5241] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5809] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5809] <... futex resumed>) = 0 [pid 5241] unlink("./6/binderfs" [pid 5809] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5241] <... unlink resumed>) = 0 [pid 5241] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5811] <... openat resumed>) = 4 [ 130.322717][ T5813] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 5811] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5811] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] <... futex resumed>) = 0 [pid 5809] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5811] <... futex resumed>) = 0 [pid 5809] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5811] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5811] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5811] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] exit_group(0 [pid 5811] <... futex resumed>) = ? [pid 5809] <... exit_group resumed>) = ? [pid 5811] +++ exited with 0 +++ [pid 5809] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5809, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5243] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./6/binderfs") = 0 [ 130.394635][ T5813] BTRFS info (device loop4): using free-space-tree [ 130.455782][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5808] <... mount resumed>) = 0 [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5808] chdir("./file0") = 0 [pid 5808] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5808] ioctl(4, LOOP_CLR_FD) = 0 [pid 5808] close(4) = 0 [pid 5808] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] <... mount resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5806] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... openat resumed>) = 3 [pid 5808] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 1 [pid 5810] chdir("./file0" [pid 5808] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5806] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... chdir resumed>) = 0 [pid 5808] <... openat resumed>) = 4 [pid 5810] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5808] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... openat resumed>) = 4 [pid 5808] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5810] ioctl(4, LOOP_CLR_FD [pid 5808] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5806] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... ioctl resumed>) = 0 [pid 5808] <... fallocate resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [ 130.534399][ T5243] BTRFS info (device loop3): last unmount of filesystem 5e1d4f39-9d5b-4003-aefd-a813ab28ada7 [pid 5810] close(4 [pid 5808] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] exit_group(0 [pid 5810] <... close resumed>) = 0 [pid 5808] <... futex resumed>) = ? [pid 5806] <... exit_group resumed>) = ? [pid 5808] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ [pid 5810] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5807] <... futex resumed>) = 0 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5806, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 5807] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 5807] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5242] <... restart_syscall resumed>) = 0 [pid 5810] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5807] <... futex resumed>) = 0 [pid 5810] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5807] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5810] <... fallocate resumed>) = 0 [pid 5807] <... futex resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5810] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5810] <... futex resumed>) = 0 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] <... openat resumed>) = 3 [pid 5810] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] newfstatat(3, "", [pid 5807] exit_group(0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5810] <... futex resumed>) = ? [pid 5807] <... exit_group resumed>) = ? [pid 5242] getdents64(3, [pid 5810] +++ exited with 0 +++ [pid 5807] +++ exited with 0 +++ [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5807, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... umount2 resumed>) = 0 [pid 5240] <... restart_syscall resumed>) = 0 [pid 5241] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5241] getdents64(4, [pid 5240] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] close(4 [pid 5240] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] unlink("./6/binderfs" [pid 5241] <... close resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5241] rmdir("./6/file0" [pid 5242] <... unlink resumed>) = 0 [pid 5241] <... rmdir resumed>) = 0 [pid 5240] newfstatat(3, "", [pid 5241] getdents64(3, [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./6") = 0 [pid 5241] mkdir("./7", 0777 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./6/binderfs") = 0 [pid 5241] <... mkdir resumed>) = 0 [pid 5240] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5897 attached [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 5897 [pid 5243] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5897] set_robust_list(0x55558b77b760, 24 [pid 5243] newfstatat(4, "", [pid 5897] <... set_robust_list resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5897] chdir("./7" [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5897] <... chdir resumed>) = 0 [pid 5243] getdents64(4, [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5897] <... prctl resumed>) = 0 [pid 5243] close(4) = 0 [pid 5897] setpgid(0, 0 [pid 5243] rmdir("./6/file0" [pid 5897] <... setpgid resumed>) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5243] getdents64(3, [pid 5897] write(3, "1000", 4 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5897] <... write resumed>) = 4 [pid 5243] close(3 [pid 5897] close(3 [pid 5243] <... close resumed>) = 0 [pid 5897] <... close resumed>) = 0 [pid 5243] rmdir("./6" [pid 5897] symlink("/dev/binderfs", "./binderfs" [pid 5243] <... rmdir resumed>) = 0 [pid 5897] <... symlink resumed>) = 0 [pid 5243] mkdir("./7", 0777 [pid 5897] write(1, "executing program\n", 18 [pid 5243] <... mkdir resumed>) = 0 [pid 5897] <... write resumed>) = 18 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5897] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... openat resumed>) = 3 [pid 5897] <... futex resumed>) = 0 [pid 5243] ioctl(3, LOOP_CLR_FD [pid 5897] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5243] <... ioctl resumed>) = 0 [pid 5897] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5243] close(3 [pid 5897] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... close resumed>) = 0 [pid 5897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 ./strace-static-x86_64: Process 5898 attached [pid 5897] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5898 [pid 5897] <... mprotect resumed>) = 0 [pid 5897] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5898] set_robust_list(0x55558b77b760, 24 [pid 5897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5898] <... set_robust_list resumed>) = 0 [pid 5898] chdir("./7" [pid 5897] <... clone3 resumed> => {parent_tid=[5899]}, 88) = 5899 [pid 5897] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5898] <... chdir resumed>) = 0 [pid 5897] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5897] <... futex resumed>) = 0 [pid 5898] <... prctl resumed>) = 0 [pid 5897] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5898] setpgid(0, 0) = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5899 attached [pid 5813] <... mount resumed>) = 0 [pid 5899] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5813] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5899] <... rseq resumed>) = 0 [pid 5813] <... openat resumed>) = 3 [pid 5899] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5813] chdir("./file0" [pid 5899] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] <... chdir resumed>) = 0 [pid 5813] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5898] write(3, "1000", 4 [pid 5813] <... openat resumed>) = 4 [pid 5899] memfd_create("syzkaller", 0 [pid 5898] <... write resumed>) = 4 [pid 5813] ioctl(4, LOOP_CLR_FD [pid 5899] <... memfd_create resumed>) = 3 [ 130.747801][ T5242] BTRFS info (device loop2): last unmount of filesystem 3a9e13c8-9a43-48af-9ab3-3320e54b52bf executing program [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5898] close(3 [pid 5813] <... ioctl resumed>) = 0 [pid 5899] <... mmap resumed>) = 0x7f5116c00000 [pid 5898] <... close resumed>) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs" [pid 5813] close(4 [pid 5898] <... symlink resumed>) = 0 [pid 5898] write(1, "executing program\n", 18) = 18 [pid 5898] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5898] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5898] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5898] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5900 attached => {parent_tid=[5900]}, 88) = 5900 [pid 5898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5898] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5898] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5900] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5900] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5900] rt_sigprocmask(SIG_SETMASK, [], [pid 5813] <... close resumed>) = 0 [pid 5900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5900] memfd_create("syzkaller", 0) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5813] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5813] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... futex resumed>) = 0 [pid 5813] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5813] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5812] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [ 130.794094][ T5240] BTRFS info (device loop0): last unmount of filesystem 986fe253-bca7-4719-9210-e4dc7f758b75 [pid 5813] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5813] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] exit_group(0) = ? [pid 5813] <... futex resumed>) = ? [pid 5813] +++ exited with 0 +++ [pid 5812] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5812, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5244] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./6/binderfs") = 0 [pid 5244] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 130.964362][ T5244] BTRFS info (device loop4): last unmount of filesystem 2b1707a9-8dc6-4d8c-93f2-5c0d0e881591 [pid 5242] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./6/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./6") = 0 [pid 5242] mkdir("./7", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5902 ./strace-static-x86_64: Process 5902 attached [pid 5902] set_robust_list(0x55558b77b760, 24) = 0 [pid 5902] chdir("./7" [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5902] <... chdir resumed>) = 0 [pid 5244] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5902] setpgid(0, 0) = 0 [pid 5244] close(4 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... close resumed>) = 0 [pid 5902] <... openat resumed>) = 3 [pid 5244] rmdir("./6/file0" [pid 5902] write(3, "1000", 4executing program ) = 4 [pid 5244] <... rmdir resumed>) = 0 [pid 5902] close(3 [pid 5244] getdents64(3, [pid 5902] <... close resumed>) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./6" [pid 5902] <... symlink resumed>) = 0 [pid 5902] write(1, "executing program\n", 18 [pid 5244] <... rmdir resumed>) = 0 [pid 5902] <... write resumed>) = 18 [pid 5244] mkdir("./7", 0777 [pid 5902] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... mkdir resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = 0 [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5902] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5903 attached [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5903 [pid 5903] set_robust_list(0x55558b77b760, 24 [pid 5902] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5903] <... set_robust_list resumed>) = 0 [pid 5902] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5903] chdir("./7" [pid 5902] <... mmap resumed>) = 0x7f511f01f000 [pid 5903] <... chdir resumed>) = 0 [pid 5902] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5902] <... mprotect resumed>) = 0 [pid 5903] <... prctl resumed>) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5902] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5903] <... openat resumed>) = 3 [pid 5903] write(3, "1000", 4 [pid 5902] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5903] <... write resumed>) = 4 [pid 5902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5904 attached [pid 5903] close(3 [pid 5902] <... clone3 resumed> => {parent_tid=[5904]}, 88) = 5904 [pid 5902] rt_sigprocmask(SIG_SETMASK, [], [pid 5903] <... close resumed>) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs" [pid 5904] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5903] <... symlink resumed>) = 0 [pid 5902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5902] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... rseq resumed>) = 0 [pid 5903] write(1, "executing program\n", 18 [pid 5904] set_robust_list(0x7f511f03f9a0, 24) = 0 executing program [pid 5904] rt_sigprocmask(SIG_SETMASK, [], [pid 5903] <... write resumed>) = 18 [pid 5902] <... futex resumed>) = 0 [pid 5904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5903] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5903] <... futex resumed>) = 0 [pid 5904] memfd_create("syzkaller", 0 [pid 5903] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5904] <... memfd_create resumed>) = 3 [pid 5903] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5903] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5903] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5904] <... mmap resumed>) = 0x7f5116c00000 [pid 5903] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5903] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5905 attached [pid 5905] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5903] <... clone3 resumed> => {parent_tid=[5905]}, 88) = 5905 [pid 5903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5905] <... rseq resumed>) = 0 [pid 5903] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] set_robust_list(0x7f511f03f9a0, 24 [pid 5903] <... futex resumed>) = 0 [pid 5905] <... set_robust_list resumed>) = 0 [pid 5905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5905] memfd_create("syzkaller", 0) = 3 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5903] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5905] <... mmap resumed>) = 0x7f5116c00000 [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./6/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./6") = 0 [pid 5240] mkdir("./7", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5906 ./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x55558b77b760, 24) = 0 [pid 5906] chdir("./7" [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5906] <... chdir resumed>) = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] setpgid(0, 0) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5906] write(3, "1000", 4) = 4 [pid 5906] close(3) = 0 [pid 5906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5906] write(1, "executing program\n", 18executing program ) = 18 [pid 5906] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5906] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5906] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5906] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5907 attached [pid 5907] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5907] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5907] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5906] <... clone3 resumed> => {parent_tid=[5907]}, 88) = 5907 [pid 5906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5906] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5907] memfd_create("syzkaller", 0) = 3 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5906] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5907] <... mmap resumed>) = 0x7f5116c00000 [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5900] <... write resumed>) = 16777216 [pid 5899] <... write resumed>) = 16777216 [pid 5900] munmap(0x7f5116c00000, 138412032 [pid 5899] munmap(0x7f5116c00000, 138412032 [pid 5900] <... munmap resumed>) = 0 [pid 5899] <... munmap resumed>) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5899] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3 [pid 5900] <... openat resumed>) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [pid 5899] <... ioctl resumed>) = 0 [pid 5899] close(3) = 0 [pid 5900] <... ioctl resumed>) = 0 [pid 5900] close(3) = 0 [pid 5900] close(4) = 0 [pid 5899] close(4 [pid 5900] mkdir("./file0", 0777 [pid 5899] <... close resumed>) = 0 [pid 5900] <... mkdir resumed>) = 0 [ 131.913300][ T5899] loop1: detected capacity change from 0 to 32768 [ 131.914110][ T5900] loop3: detected capacity change from 0 to 32768 [pid 5900] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5899] mkdir("./file0", 0777) = 0 [ 131.974946][ T5900] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5900) [pid 5899] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 132.019534][ T5900] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.022422][ T5899] BTRFS: device /dev/loop1 (7:1) using temp-fsid 3a4c65aa-c0a7-42b6-b5cc-7d0beefc7d75 [ 132.056060][ T5900] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5904] <... write resumed>) = 16777216 [ 132.087873][ T5900] BTRFS info (device loop3): using free-space-tree [ 132.092669][ T5899] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5899) [pid 5904] munmap(0x7f5116c00000, 138412032) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5905] <... write resumed>) = 16777216 [pid 5904] close(3) = 0 [pid 5904] close(4) = 0 [pid 5905] munmap(0x7f5116c00000, 138412032 [pid 5904] mkdir("./file0", 0777) = 0 [ 132.141223][ T5899] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.159738][ T5904] loop2: detected capacity change from 0 to 32768 [ 132.177375][ T5899] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5904] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5905] <... munmap resumed>) = 0 [ 132.203719][ T5904] BTRFS: device /dev/loop2 (7:2) using temp-fsid 21f58933-578c-43ea-b707-e38b8c277808 [ 132.239054][ T5899] BTRFS info (device loop1): using free-space-tree [pid 5900] <... mount resumed>) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5900] chdir("./file0") = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_CLR_FD) = 0 [pid 5900] close(4) = 0 [pid 5900] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5900] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5898] <... futex resumed>) = 0 [pid 5898] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... openat resumed>) = 4 [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5900] <... futex resumed>) = 0 [pid 5898] <... futex resumed>) = 1 [pid 5900] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5900] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5900] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5898] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5898] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... futex resumed>) = 0 [pid 5898] <... futex resumed>) = 1 [pid 5905] <... ioctl resumed>) = 0 [pid 5900] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5905] close(3 [pid 5898] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5905] <... close resumed>) = 0 [pid 5900] <... fallocate resumed>) = 0 [pid 5905] close(4 [pid 5900] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... close resumed>) = 0 [pid 5900] <... futex resumed>) = 1 [pid 5898] <... futex resumed>) = 0 [pid 5905] mkdir("./file0", 0777 [pid 5898] exit_group(0 [pid 5905] <... mkdir resumed>) = 0 [pid 5898] <... exit_group resumed>) = ? [pid 5905] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5907] <... write resumed>) = 16777216 [ 132.282975][ T5904] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5904) [ 132.303154][ T5905] loop4: detected capacity change from 0 to 32768 [pid 5907] munmap(0x7f5116c00000, 138412032) = 0 [pid 5900] +++ exited with 0 +++ [pid 5898] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5243] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5243] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./7/binderfs" [pid 5907] <... openat resumed>) = 4 [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 5243] <... unlink resumed>) = 0 [ 132.350029][ T5905] BTRFS: device /dev/loop4 (7:4) using temp-fsid dc25215c-e1f8-48a3-8927-a8a6bda231e0 [ 132.384051][ T5907] loop0: detected capacity change from 0 to 32768 [pid 5243] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... ioctl resumed>) = 0 [pid 5907] close(3) = 0 [pid 5907] close(4) = 0 [pid 5907] mkdir("./file0", 0777) = 0 [ 132.391322][ T5905] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (5905) [ 132.410250][ T5904] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.430318][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.458109][ T5904] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 132.477595][ T5907] BTRFS: device /dev/loop0 (7:0) using temp-fsid 1ae71a50-b5b1-4eb7-8e75-09efa388d7ec [ 132.513366][ T5905] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.532723][ T5904] BTRFS info (device loop2): using free-space-tree [ 132.542346][ T5907] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5907) [pid 5907] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./7/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [ 132.580608][ T5905] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.599069][ T5905] BTRFS info (device loop4): using free-space-tree [ 132.619853][ T5907] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] close(3) = 0 [pid 5243] rmdir("./7") = 0 [pid 5243] mkdir("./8", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5953 attached [pid 5953] set_robust_list(0x55558b77b760, 24 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 5953 [pid 5953] <... set_robust_list resumed>) = 0 [pid 5953] chdir("./8") = 0 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5953] setpgid(0, 0) = 0 [pid 5899] <... mount resumed>) = 0 [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5899] <... openat resumed>) = 3 [pid 5899] chdir("./file0" [pid 5953] <... openat resumed>) = 3 [pid 5899] <... chdir resumed>) = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5953] write(3, "1000", 4 [pid 5899] <... openat resumed>) = 4 [pid 5953] <... write resumed>) = 4 [pid 5899] ioctl(4, LOOP_CLR_FD) = 0 [pid 5899] close(4) = 0 [pid 5899] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5899] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5897] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5899] <... openat resumed>) = 4 [pid 5897] <... futex resumed>) = 0 [pid 5897] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5899] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... futex resumed>) = 0 [pid 5897] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5897] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5953] close(3 [pid 5899] <... futex resumed>) = 1 [pid 5953] <... close resumed>) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5953] write(1, "executing program\n", 18) = 18 [pid 5899] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5953] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5899] <... fallocate resumed>) = 0 [pid 5953] <... futex resumed>) = 0 [pid 5953] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5899] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5899] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5953] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5899] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] exit_group(0 [pid 5953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5899] <... futex resumed>) = ? [pid 5897] <... exit_group resumed>) = ? [pid 5953] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5899] +++ exited with 0 +++ [pid 5897] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [ 132.673743][ T5907] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 132.713235][ T5907] BTRFS info (device loop0): using free-space-tree [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 5953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5965 attached [pid 5965] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5965] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5241] <... restart_syscall resumed>) = 0 [pid 5241] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5965] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] <... openat resumed>) = 3 [pid 5965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5953] <... clone3 resumed> => {parent_tid=[5965]}, 88) = 5965 [pid 5241] newfstatat(3, "", [pid 5965] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5953] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] getdents64(3, [pid 5953] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5953] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = 0 [pid 5953] <... futex resumed>) = 1 [pid 5241] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5953] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5241] unlink("./7/binderfs" [pid 5965] <... memfd_create resumed>) = 3 [pid 5241] <... unlink resumed>) = 0 [pid 5241] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5904] <... mount resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./file0") = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_CLR_FD) = 0 [pid 5904] close(4) = 0 [pid 5904] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5902] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... openat resumed>) = 4 [pid 5902] <... futex resumed>) = 0 [pid 5902] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5905] <... mount resumed>) = 0 [pid 5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5905] chdir("./file0") = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5905] ioctl(4, LOOP_CLR_FD) = 0 [pid 5905] close(4) = 0 [pid 5905] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5905] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5904] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5902] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] <... futex resumed>) = 0 [pid 5902] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5905] <... futex resumed>) = 1 [pid 5905] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5903] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] <... fallocate resumed>) = 0 [pid 5904] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5903] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5905] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... fallocate resumed>) = 0 [pid 5903] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] exit_group(0 [pid 5904] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] <... exit_group resumed>) = ? [pid 5902] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5902] exit_group(0 [pid 5904] <... futex resumed>) = 0 [pid 5902] <... exit_group resumed>) = ? [pid 5904] +++ exited with 0 +++ [pid 5902] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 5905] <... futex resumed>) = ? [pid 5242] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5905] +++ exited with 0 +++ [pid 5903] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5242] <... openat resumed>) = 3 [pid 5242] newfstatat(3, "", [pid 5244] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] getdents64(3, [pid 5244] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] <... openat resumed>) = 3 [pid 5242] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] newfstatat(3, "", [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 132.926852][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.942638][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.954962][ T5241] BTRFS info (device loop1): last unmount of filesystem 3a4c65aa-c0a7-42b6-b5cc-7d0beefc7d75 [pid 5242] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] unlink("./7/binderfs" [pid 5244] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] <... unlink resumed>) = 0 [pid 5244] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5242] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./7/binderfs") = 0 [pid 5244] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... mount resumed>) = 0 [pid 5907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5907] chdir("./file0") = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5907] ioctl(4, LOOP_CLR_FD) = 0 [pid 5907] close(4) = 0 [pid 5907] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5906] <... futex resumed>) = 0 [pid 5907] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5906] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] <... openat resumed>) = 4 [pid 5906] <... futex resumed>) = 0 [pid 5907] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5907] <... futex resumed>) = 0 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5906] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] <... fallocate resumed>) = 0 [pid 5906] <... futex resumed>) = 0 [pid 5907] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5906] exit_group(0) = ? [pid 5907] +++ exited with 0 +++ [pid 5906] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... umount2 resumed>) = 0 [pid 5240] unlink("./7/binderfs" [pid 5241] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... unlink resumed>) = 0 [pid 5240] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 133.173492][ T5242] BTRFS info (device loop2): last unmount of filesystem 21f58933-578c-43ea-b707-e38b8c277808 [ 133.191123][ T5244] BTRFS info (device loop4): last unmount of filesystem dc25215c-e1f8-48a3-8927-a8a6bda231e0 [pid 5241] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./7/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./7") = 0 [pid 5241] mkdir("./8", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5993 attached [pid 5993] set_robust_list(0x55558b77b760, 24) = 0 [pid 5993] chdir("./8" [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 5993 [pid 5993] <... chdir resumed>) = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5993] setpgid(0, 0) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] <... umount2 resumed>) = 0 [pid 5993] write(3, "1000", 4 [pid 5242] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] <... write resumed>) = 4 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] close(3 [pid 5242] newfstatat(AT_FDCWD, "./7/file0", [pid 5993] <... close resumed>) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs" [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5993] <... symlink resumed>) = 0 [pid 5242] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] write(1, "executing program\n", 18 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5993] <... write resumed>) = 18 [pid 5242] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5242] <... openat resumed>) = 4 [pid 5993] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] newfstatat(4, "", [pid 5993] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5993] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] getdents64(4, [pid 5993] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [ 133.362317][ T5240] BTRFS info (device loop0): last unmount of filesystem 1ae71a50-b5b1-4eb7-8e75-09efa388d7ec [pid 5993] <... mmap resumed>) = 0x7f511f01f000 [pid 5242] getdents64(4, [pid 5993] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5993] <... mprotect resumed>) = 0 [pid 5242] close(4 [pid 5993] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] <... close resumed>) = 0 [pid 5993] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] rmdir("./7/file0") = 0 [pid 5993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5994 attached [pid 5242] getdents64(3, [pid 5994] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5994] <... rseq resumed>) = 0 [pid 5993] <... clone3 resumed> => {parent_tid=[5994]}, 88) = 5994 [pid 5242] close(3 [pid 5994] set_robust_list(0x7f511f03f9a0, 24 [pid 5993] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... close resumed>) = 0 [pid 5993] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] rmdir("./7" [pid 5993] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5994] <... set_robust_list resumed>) = 0 [pid 5993] <... futex resumed>) = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 5242] mkdir("./8", 0777executing program ) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5995 attached , child_tidptr=0x55558b77b750) = 5995 [pid 5995] set_robust_list(0x55558b77b760, 24) = 0 [pid 5995] chdir("./8") = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] setpgid(0, 0) = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5995] write(3, "1000", 4) = 4 [pid 5995] close(3) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5995] write(1, "executing program\n", 18) = 18 [pid 5995] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5995] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5995] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5993] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5995] <... mprotect resumed>) = 0 [pid 5994] rt_sigprocmask(SIG_SETMASK, [], [pid 5995] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5995] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 5996 attached => {parent_tid=[5996]}, 88) = 5996 [pid 5995] rt_sigprocmask(SIG_SETMASK, [], [pid 5996] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5995] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5994] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5995] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5996] <... rseq resumed>) = 0 [pid 5996] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5996] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5996] memfd_create("syzkaller", 0) = 3 [pid 5994] memfd_create("syzkaller", 0 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5994] <... memfd_create resumed>) = 3 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./7/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./7") = 0 [pid 5240] mkdir("./8", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 5997 ./strace-static-x86_64: Process 5997 attached [pid 5997] set_robust_list(0x55558b77b760, 24) = 0 [pid 5997] chdir("./8") = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5997] setpgid(0, 0) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5997] write(1, "executing program\n", 18) = 18 [pid 5997] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5997] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[5998]}, 88) = 5998 [pid 5997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5997] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5998 attached [pid 5998] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5998] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5998] memfd_create("syzkaller", 0) = 3 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./7/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./7") = 0 [pid 5244] mkdir("./8", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5999 attached [pid 5999] set_robust_list(0x55558b77b760, 24 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 5999 [pid 5999] <... set_robust_list resumed>) = 0 [pid 5999] chdir("./8") = 0 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5999] setpgid(0, 0) = 0 [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5999] write(3, "1000", 4) = 4 [pid 5999] close(3) = 0 executing program [pid 5999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5999] write(1, "executing program\n", 18) = 18 [pid 5999] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5999] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5999] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5999] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5999] <... mprotect resumed>) = 0 [pid 5999] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5999] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6000]}, 88) = 6000 [pid 5999] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6000 attached [pid 5999] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6000] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5999] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6000] <... rseq resumed>) = 0 [pid 6000] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6000] memfd_create("syzkaller", 0) = 3 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5965] <... write resumed>) = 16777216 [pid 5965] munmap(0x7f5116c00000, 138412032) = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5965] <... ioctl resumed>) = 0 [pid 5965] close(3) = 0 [pid 5965] close(4) = 0 [ 134.311862][ T5965] loop3: detected capacity change from 0 to 32768 [pid 5965] mkdir("./file0", 0777) = 0 [ 134.392517][ T5965] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (5965) [ 134.484324][ T5965] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 134.527354][ T5965] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 134.560882][ T5965] BTRFS info (device loop3): using free-space-tree [pid 5965] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5996] <... write resumed>) = 16777216 [pid 5998] <... write resumed>) = 16777216 [pid 5994] <... write resumed>) = 16777216 [pid 5965] <... mount resumed>) = 0 [pid 5996] munmap(0x7f5116c00000, 138412032 [pid 5998] munmap(0x7f5116c00000, 138412032 [pid 5994] munmap(0x7f5116c00000, 138412032) = 0 [pid 5965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5965] chdir("./file0") = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5965] ioctl(4, LOOP_CLR_FD) = 0 [pid 5965] close(4 [pid 5996] <... munmap resumed>) = 0 [pid 5965] <... close resumed>) = 0 [pid 5965] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5996] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5965] <... futex resumed>) = 1 [pid 5953] <... futex resumed>) = 0 [pid 5965] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5953] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... openat resumed>) = 4 [pid 5953] <... futex resumed>) = 0 [pid 5953] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... munmap resumed>) = 0 [pid 5965] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5996] <... openat resumed>) = 4 [pid 5994] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5965] <... futex resumed>) = 1 [pid 5953] <... futex resumed>) = 0 [pid 5965] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5953] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5994] <... openat resumed>) = 4 [pid 5965] <... fallocate resumed>) = 0 [pid 5953] <... futex resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5996] <... ioctl resumed>) = 0 [pid 5994] ioctl(4, LOOP_SET_FD, 3 [pid 5965] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] close(3 [pid 5965] <... futex resumed>) = 0 [pid 5953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5996] <... close resumed>) = 0 [pid 5953] exit_group(0 [pid 5996] close(4 [pid 5953] <... exit_group resumed>) = ? [pid 5996] <... close resumed>) = 0 [pid 5996] mkdir("./file0", 0777 [pid 5998] <... openat resumed>) = 4 [pid 5996] <... mkdir resumed>) = 0 [pid 5998] ioctl(4, LOOP_SET_FD, 3 [pid 5996] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5965] +++ exited with 0 +++ [pid 5953] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5243] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./8/binderfs") = 0 [ 134.835204][ T5996] loop2: detected capacity change from 0 to 32768 [ 134.844052][ T5994] loop1: detected capacity change from 0 to 32768 [ 134.856465][ T5998] loop0: detected capacity change from 0 to 32768 [ 134.863209][ T5996] BTRFS: device /dev/loop2 (7:2) using temp-fsid 99d24f68-71c4-495b-9fdb-e2682c8dc84b [pid 5243] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... ioctl resumed>) = 0 [pid 5994] close(3 [pid 5998] <... ioctl resumed>) = 0 [pid 5994] <... close resumed>) = 0 [pid 5998] close(3 [pid 5994] close(4 [pid 5998] <... close resumed>) = 0 [pid 5994] <... close resumed>) = 0 [pid 5998] close(4 [pid 5994] mkdir("./file0", 0777 [pid 5998] <... close resumed>) = 0 [pid 5994] <... mkdir resumed>) = 0 [pid 5998] mkdir("./file0", 0777 [pid 5994] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5998] <... mkdir resumed>) = 0 [ 134.887301][ T5996] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (5996) [ 134.934275][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 134.990756][ T5996] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 135.001812][ T5994] BTRFS: device /dev/loop1 (7:1) using temp-fsid 479f32bc-159f-4572-a5e4-ddf7c645adea [ 135.012277][ T5994] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (5994) [ 135.026831][ T5996] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 5998] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./8/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./8") = 0 [pid 5243] mkdir("./9", 0777) = 0 [ 135.042439][ T5998] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (5998) [ 135.056256][ T5994] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 135.067031][ T5996] BTRFS info (device loop2): using free-space-tree [ 135.079318][ T5994] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6028 [ 135.112989][ T5998] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 135.122919][ T5994] BTRFS info (device loop1): using free-space-tree ./strace-static-x86_64: Process 6028 attached [pid 6028] set_robust_list(0x55558b77b760, 24) = 0 [pid 6028] chdir("./9") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4) = 4 [pid 6028] close(3) = 0 [ 135.163783][ T5998] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 135.203788][ T5998] BTRFS info (device loop0): using free-space-tree [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6028] write(1, "executing program\n", 18executing program ) = 18 [pid 6028] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6028] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6028] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6028] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6028] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6036 attached [pid 6036] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6036] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6036] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6028] <... clone3 resumed> => {parent_tid=[6036]}, 88) = 6036 [pid 6028] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6028] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = 0 [pid 6028] <... futex resumed>) = 1 [pid 6028] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6036] memfd_create("syzkaller", 0) = 3 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6000] <... write resumed>) = 16777216 [pid 6000] munmap(0x7f5116c00000, 138412032) = 0 [pid 5996] <... mount resumed>) = 0 [pid 5996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5996] chdir("./file0") = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5996] ioctl(4, LOOP_CLR_FD) = 0 [pid 5996] close(4) = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5996] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5996] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6000] <... openat resumed>) = 4 [pid 5995] <... futex resumed>) = 0 [pid 6000] ioctl(4, LOOP_SET_FD, 3 [pid 5995] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5996] <... futex resumed>) = 0 [pid 5995] <... futex resumed>) = 1 [pid 5996] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5995] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... openat resumed>) = 4 [pid 6000] <... ioctl resumed>) = 0 [pid 6000] close(3) = 0 [pid 6000] close(4) = 0 [pid 6000] mkdir("./file0", 0777) = 0 [pid 6000] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5996] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5996] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5996] <... futex resumed>) = 0 [pid 5995] <... futex resumed>) = 1 [pid 5996] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5995] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5994] <... mount resumed>) = 0 [pid 5996] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] exit_group(0 [pid 5994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5996] <... futex resumed>) = ? [pid 5995] <... exit_group resumed>) = ? [pid 5994] <... openat resumed>) = 3 [pid 5996] +++ exited with 0 +++ [pid 5995] +++ exited with 0 +++ [pid 5994] chdir("./file0") = 0 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=30 /* 0.30 s */} --- [pid 5994] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5994] ioctl(4, LOOP_CLR_FD [pid 5242] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... ioctl resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5994] close(4 [pid 5242] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5994] <... close resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5994] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [ 135.416845][ T6000] loop4: detected capacity change from 0 to 32768 [ 135.439786][ T6000] BTRFS: device /dev/loop4 (7:4) using temp-fsid 5e728719-f01a-42ab-8c43-5c238e937835 [pid 5242] newfstatat(3, "", [pid 5994] <... futex resumed>) = 1 [pid 5993] <... futex resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5994] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5993] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] getdents64(3, [pid 5994] <... openat resumed>) = 4 [pid 5993] <... futex resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5994] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5994] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5993] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5994] <... fallocate resumed>) = 0 [pid 5993] <... futex resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5994] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] unlink("./8/binderfs" [pid 5994] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] <... unlink resumed>) = 0 [pid 5994] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5993] exit_group(0 [pid 5242] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... futex resumed>) = ? [pid 5993] <... exit_group resumed>) = ? [pid 5994] +++ exited with 0 +++ [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5993] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=22 /* 0.22 s */} --- [pid 5241] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./8/binderfs") = 0 [ 135.522819][ T5242] BTRFS info (device loop2): last unmount of filesystem 99d24f68-71c4-495b-9fdb-e2682c8dc84b [ 135.545323][ T6000] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6000) [pid 5241] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5998] <... mount resumed>) = 0 [pid 5998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5998] chdir("./file0") = 0 [pid 5998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5998] ioctl(4, LOOP_CLR_FD) = 0 [pid 5998] close(4) = 0 [pid 5998] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... umount2 resumed>) = 0 [pid 5998] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5997] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... openat resumed>) = 4 [pid 5998] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.616819][ T5241] BTRFS info (device loop1): last unmount of filesystem 479f32bc-159f-4572-a5e4-ddf7c645adea [ 135.646537][ T6000] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5997] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5998] <... futex resumed>) = 1 [pid 5998] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5242] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5998] <... fallocate resumed>) = 0 [pid 5998] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] <... futex resumed>) = 0 [pid 5997] exit_group(0) = ? [pid 5998] <... futex resumed>) = ? [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5998] +++ exited with 0 +++ [pid 5997] +++ exited with 0 +++ [pid 5242] newfstatat(AT_FDCWD, "./8/file0", [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=23 /* 0.23 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... restart_syscall resumed>) = 0 [pid 5242] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... umount2 resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] newfstatat(AT_FDCWD, "./8/file0", [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... openat resumed>) = 3 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(3, "", [pid 5241] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] <... openat resumed>) = 4 [pid 5240] getdents64(3, [pid 5241] newfstatat(4, "", [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] getdents64(4, [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5241] getdents64(4, [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./8/binderfs" [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] <... unlink resumed>) = 0 [pid 5241] close(4 [pid 5240] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... close resumed>) = 0 [pid 5241] rmdir("./8/file0" [pid 5242] newfstatat(4, "", [pid 5241] <... rmdir resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] getdents64(4, [ 135.708350][ T6000] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 5241] close(3 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./8/file0") = 0 [pid 5241] <... close resumed>) = 0 [pid 5241] rmdir("./8") = 0 [pid 5241] mkdir("./9", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] getdents64(3, ./strace-static-x86_64: Process 6070 attached 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6070 [pid 6070] set_robust_list(0x55558b77b760, 24) = 0 [pid 6070] chdir("./9") = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0) = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] close(3) = 0 [pid 6070] write(3, "1000", 4 [pid 5242] rmdir("./8" [pid 6070] <... write resumed>) = 4 [pid 6070] close(3) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 5242] mkdir("./9", 0777executing program ) = 0 [pid 6070] write(1, "executing program\n", 18) = 18 [pid 6070] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6070] <... futex resumed>) = 0 [pid 6070] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6070] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] <... openat resumed>) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3 [pid 6070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... close resumed>) = 0 [pid 6070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6070] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6075 attached [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6070] <... clone3 resumed> => {parent_tid=[6075]}, 88) = 6075 ./strace-static-x86_64: Process 6076 attached [pid 6075] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6070] rt_sigprocmask(SIG_SETMASK, [], [pid 6075] <... rseq resumed>) = 0 [pid 6070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6076 [pid 6076] set_robust_list(0x55558b77b760, 24 [ 135.759769][ T6000] BTRFS info (device loop4): using free-space-tree [ 135.768703][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6070] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... set_robust_list resumed>) = 0 [pid 6075] set_robust_list(0x7f511f03f9a0, 24 [pid 6070] <... futex resumed>) = 0 [pid 6076] chdir("./9" [pid 6070] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] <... set_robust_list resumed>) = 0 [pid 6075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6075] memfd_create("syzkaller", 0) = 3 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6076] <... chdir resumed>) = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6076] close(3) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6076] write(1, "executing program\n", 18) = 18 [pid 6076] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6076] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6076] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6076] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6076] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6087 attached => {parent_tid=[6087]}, 88) = 6087 [pid 6087] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6076] rt_sigprocmask(SIG_SETMASK, [], [pid 6087] <... rseq resumed>) = 0 [pid 6076] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6087] set_robust_list(0x7f511f03f9a0, 24 [pid 6076] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... set_robust_list resumed>) = 0 [pid 6087] rt_sigprocmask(SIG_SETMASK, [], [pid 6076] <... futex resumed>) = 0 [pid 6087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6076] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6087] memfd_create("syzkaller", 0) = 3 [pid 6000] <... mount resumed>) = 0 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5240] <... umount2 resumed>) = 0 [pid 6000] <... openat resumed>) = 3 [pid 5240] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] chdir("./file0" [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6000] <... chdir resumed>) = 0 [pid 5240] newfstatat(AT_FDCWD, "./8/file0", [pid 6000] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6000] <... openat resumed>) = 4 [pid 5240] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] ioctl(4, LOOP_CLR_FD [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6000] <... ioctl resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6000] close(4 [pid 5240] <... openat resumed>) = 4 [pid 6000] <... close resumed>) = 0 [pid 5240] newfstatat(4, "", [pid 6000] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6000] <... futex resumed>) = 1 [pid 5999] <... futex resumed>) = 0 [pid 5240] getdents64(4, [pid 6000] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5999] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5999] <... futex resumed>) = 0 [pid 5999] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] <... openat resumed>) = 4 [pid 5240] getdents64(4, [pid 6000] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6000] <... futex resumed>) = 1 [pid 5999] <... futex resumed>) = 0 [pid 5240] close(4 [pid 5999] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5999] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5240] <... close resumed>) = 0 [pid 6000] <... fallocate resumed>) = 0 [pid 5240] rmdir("./8/file0" [pid 6000] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... rmdir resumed>) = 0 [pid 6000] <... futex resumed>) = 1 [pid 5240] getdents64(3, [pid 6000] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3 [pid 5999] <... futex resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5999] exit_group(0 [pid 5240] rmdir("./8") = 0 [pid 5240] mkdir("./9", 0777 [pid 5999] <... exit_group resumed>) = ? [pid 5240] <... mkdir resumed>) = 0 [pid 6000] <... futex resumed>) = ? [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6000] +++ exited with 0 +++ [pid 5999] +++ exited with 0 +++ [pid 5240] <... openat resumed>) = 3 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 5240] ioctl(3, LOOP_CLR_FD) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6090 ./strace-static-x86_64: Process 6090 attached [pid 5244] <... restart_syscall resumed>) = 0 [pid 5244] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] set_robust_list(0x55558b77b760, 24) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] chdir("./9" [pid 5244] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6090] <... chdir resumed>) = 0 [pid 5244] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] setpgid(0, 0 [pid 5244] newfstatat(AT_FDCWD, "./8/binderfs", [pid 6090] <... setpgid resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] unlink("./8/binderfs") = 0 [pid 6090] <... openat resumed>) = 3 [pid 5244] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] write(3, "1000", 4) = 4 [pid 6090] close(3) = 0 executing program [pid 6090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6090] write(1, "executing program\n", 18) = 18 [pid 6090] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6036] <... write resumed>) = 16777216 [pid 6090] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6090] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6036] munmap(0x7f5116c00000, 138412032 [pid 6090] <... mprotect resumed>) = 0 [pid 6090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 6091 attached [pid 6091] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6091] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6091] rt_sigprocmask(SIG_SETMASK, [], [pid 6090] <... clone3 resumed> => {parent_tid=[6091]}, 88) = 6091 [pid 6036] <... munmap resumed>) = 0 [pid 6090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6090] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6090] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6091] memfd_create("syzkaller", 0) = 3 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6036] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 136.197388][ T5244] BTRFS info (device loop4): last unmount of filesystem 5e728719-f01a-42ab-8c43-5c238e937835 [pid 6036] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6036] close(3) = 0 [pid 6036] close(4) = 0 [ 136.253671][ T6036] loop3: detected capacity change from 0 to 32768 [pid 6036] mkdir("./file0", 0777) = 0 [pid 6036] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 136.352778][ T6036] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6036) [ 136.422608][ T6036] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 136.467360][ T6036] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 136.503070][ T6036] BTRFS info (device loop3): using free-space-tree [pid 6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6075] munmap(0x7f5116c00000, 138412032) = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6036] <... mount resumed>) = 0 [pid 6075] <... openat resumed>) = 4 [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6075] <... ioctl resumed>) = 0 [pid 6036] chdir("./file0" [pid 6075] close(3) = 0 [pid 6075] close(4 [pid 6087] <... write resumed>) = 16777216 [pid 6075] <... close resumed>) = 0 [pid 6036] <... chdir resumed>) = 0 [pid 6075] mkdir("./file0", 0777 [pid 6036] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6087] munmap(0x7f5116c00000, 138412032 [pid 6036] <... openat resumed>) = 4 [pid 6075] <... mkdir resumed>) = 0 [ 136.751481][ T6075] loop1: detected capacity change from 0 to 32768 [pid 6036] ioctl(4, LOOP_CLR_FD [pid 6075] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6036] <... ioctl resumed>) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 6036] close(4) = 0 [pid 5244] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6036] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6036] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6028] <... futex resumed>) = 0 [pid 6036] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6028] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6087] <... munmap resumed>) = 0 [pid 6036] <... openat resumed>) = 4 [pid 5244] newfstatat(AT_FDCWD, "./8/file0", [pid 6036] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6028] <... futex resumed>) = 0 [pid 5244] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6028] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6036] <... fallocate resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6036] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6036] <... futex resumed>) = 1 [pid 6028] <... futex resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 6087] <... openat resumed>) = 4 [pid 5244] newfstatat(4, "", [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 6028] exit_group(0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 136.791767][ T6075] BTRFS: device /dev/loop1 (7:1) using temp-fsid e7215019-b018-43c0-9476-c33ecd4e6268 [ 136.827732][ T6075] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6075) [pid 6028] <... exit_group resumed>) = ? [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6036] +++ exited with 0 +++ [pid 6028] +++ exited with 0 +++ [pid 5244] close(4) = 0 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5244] rmdir("./8/file0" [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 6087] <... ioctl resumed>) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5243] <... restart_syscall resumed>) = 0 [pid 6087] close(3 [pid 5244] getdents64(3, [pid 6087] <... close resumed>) = 0 [pid 6087] close(4 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3 [pid 5243] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6087] <... close resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 6087] mkdir("./file0", 0777 [pid 5244] rmdir("./8" [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6087] <... mkdir resumed>) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5243] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6087] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] mkdir("./9", 0777 [pid 5243] <... openat resumed>) = 3 [ 136.846212][ T6087] loop2: detected capacity change from 0 to 32768 [pid 5244] <... mkdir resumed>) = 0 [pid 5243] newfstatat(3, "", [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... openat resumed>) = 3 [pid 5243] getdents64(3, [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [ 136.893673][ T6075] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 136.904227][ T6087] BTRFS: device /dev/loop2 (7:2) using temp-fsid fb904362-14bc-46ca-a534-dc928794ce16 [ 136.925699][ T6087] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6087) [pid 5243] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6113 attached , child_tidptr=0x55558b77b750) = 6113 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./9/binderfs") = 0 [pid 5243] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 136.939131][ T6075] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.939204][ T6075] BTRFS info (device loop1): using free-space-tree [pid 6113] set_robust_list(0x55558b77b760, 24) = 0 [pid 6113] chdir("./9") = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6113] write(3, "1000", 4) = 4 [pid 6113] close(3) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6113] write(1, "executing program\n", 18) = 18 [pid 6113] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6113] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6113] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6113] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6122 attached => {parent_tid=[6122]}, 88) = 6122 [pid 6113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6113] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.011086][ T6087] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 137.043564][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6113] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6091] <... write resumed>) = 16777216 [pid 6122] <... rseq resumed>) = 0 [pid 6122] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6091] munmap(0x7f5116c00000, 138412032 [pid 6122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6122] memfd_create("syzkaller", 0 [pid 6091] <... munmap resumed>) = 0 [pid 6122] <... memfd_create resumed>) = 3 [pid 6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6091] <... openat resumed>) = 4 [pid 6122] <... mmap resumed>) = 0x7f5116c00000 [pid 6091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6091] close(3) = 0 [pid 6091] close(4) = 0 [pid 6091] mkdir("./file0", 0777) = 0 [pid 6091] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6075] <... mount resumed>) = 0 [ 137.079718][ T6087] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 137.112471][ T6091] loop0: detected capacity change from 0 to 32768 [ 137.119916][ T6087] BTRFS info (device loop2): using free-space-tree [pid 6075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6075] chdir("./file0") = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6075] ioctl(4, LOOP_CLR_FD) = 0 [pid 6075] close(4) = 0 [pid 6075] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] <... futex resumed>) = 0 [pid 6075] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6070] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6075] <... openat resumed>) = 4 [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6075] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] <... futex resumed>) = 0 [pid 6075] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6070] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6075] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6070] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6075] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] <... futex resumed>) = 0 [pid 6075] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6070] exit_group(0) = ? [pid 6075] <... futex resumed>) = ? [pid 6075] +++ exited with 0 +++ [pid 6070] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6070, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=27 /* 0.27 s */} --- [pid 5241] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 137.162762][ T6091] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6091) [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./9/binderfs") = 0 [ 137.291578][ T5241] BTRFS info (device loop1): last unmount of filesystem e7215019-b018-43c0-9476-c33ecd4e6268 [ 137.304181][ T6091] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5241] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6087] <... mount resumed>) = 0 [pid 6087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6087] chdir("./file0") = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6087] ioctl(4, LOOP_CLR_FD) = 0 [pid 6087] close(4) = 0 [pid 6087] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6087] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6076] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... openat resumed>) = 4 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6087] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6076] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... fallocate resumed>) = 0 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6076] exit_group(0) = ? [pid 6087] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=26 /* 0.26 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 137.376465][ T6091] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./9/binderfs") = 0 [pid 5242] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 137.425791][ T6091] BTRFS info (device loop0): using free-space-tree [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./9/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./9") = 0 [pid 5241] mkdir("./10", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [ 137.514864][ T5242] BTRFS info (device loop2): last unmount of filesystem fb904362-14bc-46ca-a534-dc928794ce16 [pid 5243] <... umount2 resumed>) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6158 attached [pid 6158] set_robust_list(0x55558b77b760, 24 [pid 5243] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6158] <... set_robust_list resumed>) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6158] chdir("./10") = 0 [pid 5243] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6158] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./9/file0") = 0 [pid 6158] write(3, "1000", 4 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6158 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./9") = 0 [pid 5243] mkdir("./10", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6159 attached [pid 6159] set_robust_list(0x55558b77b760, 24) = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 6159 [pid 6159] chdir("./10" [pid 5242] <... umount2 resumed>) = 0 [pid 6159] <... chdir resumed>) = 0 [pid 6158] <... write resumed>) = 4 [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] close(3 [pid 5242] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] setpgid(0, 0 [pid 6158] <... close resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] <... setpgid resumed>) = 0 [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6158] symlink("/dev/binderfs", "./binderfs" [pid 5242] newfstatat(AT_FDCWD, "./9/file0", executing program [pid 6159] <... openat resumed>) = 3 [pid 6158] <... symlink resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6159] write(3, "1000", 4) = 4 [pid 6159] close(3) = 0 [pid 6158] write(1, "executing program\n", 18 [pid 5242] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6158] <... write resumed>) = 18 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] write(1, "executing program\n", 18) = 18 [pid 6158] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6159] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6159] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6158] <... futex resumed>) = 0 [pid 6091] <... mount resumed>) = 0 [pid 6159] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] <... openat resumed>) = 4 [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5242] newfstatat(4, "", [pid 6159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6158] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6091] <... openat resumed>) = 3 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6159] <... mmap resumed>) = 0x7f511f01f000 [pid 6158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6122] <... write resumed>) = 16777216 [pid 6091] chdir("./file0" [pid 5242] getdents64(4, [pid 6159] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6122] munmap(0x7f5116c00000, 138412032 [pid 6159] <... mprotect resumed>) = 0 [pid 6158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6091] <... chdir resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6159] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5242] getdents64(4, [pid 6159] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6091] <... openat resumed>) = 4 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6091] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6162 attached [pid 6158] <... mmap resumed>) = 0x7f511f01f000 [pid 6091] <... ioctl resumed>) = 0 [pid 5242] close(4 [pid 6158] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6091] close(4 [pid 5242] <... close resumed>) = 0 [pid 6158] <... mprotect resumed>) = 0 [pid 6091] <... close resumed>) = 0 [pid 5242] rmdir("./9/file0" [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6091] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... rmdir resumed>) = 0 [pid 6158] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6091] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 5242] getdents64(3, [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6090] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... clone3 resumed> => {parent_tid=[6162]}, 88) = 6162 [pid 6091] <... openat resumed>) = 4 [pid 6090] <... futex resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6163 attached [pid 6162] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6158] <... clone3 resumed> => {parent_tid=[6163]}, 88) = 6163 [pid 6091] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6163] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6162] <... rseq resumed>) = 0 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], [pid 6091] <... futex resumed>) = 0 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] close(3 [pid 6163] <... rseq resumed>) = 0 [pid 6162] set_robust_list(0x7f511f03f9a0, 24 [pid 6158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6091] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... close resumed>) = 0 [pid 6163] set_robust_list(0x7f511f03f9a0, 24 [pid 6162] <... set_robust_list resumed>) = 0 [pid 6159] rt_sigprocmask(SIG_SETMASK, [], [pid 6158] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6090] <... futex resumed>) = 0 [pid 5242] rmdir("./9" [pid 6163] rt_sigprocmask(SIG_SETMASK, [], [pid 6162] rt_sigprocmask(SIG_SETMASK, [], [pid 6158] <... futex resumed>) = 0 [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6091] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6090] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... rmdir resumed>) = 0 [pid 6163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6091] <... fallocate resumed>) = 0 [pid 6163] memfd_create("syzkaller", 0 [pid 6162] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... munmap resumed>) = 0 [pid 5242] mkdir("./10", 0777 [pid 6163] <... memfd_create resumed>) = 3 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6091] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... mkdir resumed>) = 0 [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6162] memfd_create("syzkaller", 0 [pid 6091] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6159] <... futex resumed>) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6163] <... mmap resumed>) = 0x7f5116c00000 [pid 6162] <... memfd_create resumed>) = 3 [pid 6159] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] <... openat resumed>) = 4 [pid 6091] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] exit_group(0 [pid 5242] <... openat resumed>) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6122] ioctl(4, LOOP_SET_FD, 3 [pid 6091] <... futex resumed>) = ? [pid 6090] <... exit_group resumed>) = ? [pid 6162] <... mmap resumed>) = 0x7f5116c00000 [pid 6091] +++ exited with 0 +++ [pid 5242] ioctl(3, LOOP_CLR_FD [pid 6122] <... ioctl resumed>) = 0 [pid 6090] +++ exited with 0 +++ [pid 6122] close(3 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=21 /* 0.21 s */} --- [pid 6122] <... close resumed>) = 0 [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 6122] close(4) = 0 [pid 5242] <... ioctl resumed>) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6164 attached [pid 6122] mkdir("./file0", 0777 [pid 6164] set_robust_list(0x55558b77b760, 24 [pid 6122] <... mkdir resumed>) = 0 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6164 [pid 5240] <... restart_syscall resumed>) = 0 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6122] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6164] chdir("./10" [pid 5240] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6164] <... chdir resumed>) = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6164] <... prctl resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6164] setpgid(0, 0) = 0 [pid 5240] <... openat resumed>) = 3 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] newfstatat(3, "", [pid 6164] <... openat resumed>) = 3 [pid 6164] write(3, "1000", 4 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6164] <... write resumed>) = 4 [ 137.738840][ T6122] loop4: detected capacity change from 0 to 32768 [ 137.771968][ T6122] BTRFS: device /dev/loop4 (7:4) using temp-fsid 948a10e7-c397-467e-b016-5ea62d377b49 [pid 6164] close(3 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6164] <... close resumed>) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs" [pid 5240] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6164] <... symlink resumed>) = 0 [pid 6164] write(1, "executing program\n", 18 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6164] <... write resumed>) = 18 [pid 6164] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] newfstatat(AT_FDCWD, "./9/binderfs", [pid 6164] <... futex resumed>) = 0 [pid 6164] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6164] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5240] unlink("./9/binderfs" [pid 6164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5240] <... unlink resumed>) = 0 [pid 6164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6164] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6165]}, 88) = 6165 [ 137.814125][ T6122] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6122) [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6164] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6165 attached ) = 0 [pid 6165] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6164] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6165] <... rseq resumed>) = 0 [pid 6165] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 137.903973][ T6122] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 137.936743][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 137.947391][ T6122] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 137.997092][ T6122] BTRFS info (device loop4): using free-space-tree [pid 6122] <... mount resumed>) = 0 [pid 6122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file0") = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_CLR_FD) = 0 [pid 6122] close(4) = 0 [pid 6122] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6122] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6122] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6113] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... openat resumed>) = 4 [pid 6122] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6122] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6122] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6113] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... fallocate resumed>) = 0 [pid 6122] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6122] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] exit_group(0 [pid 6122] <... futex resumed>) = ? [pid 6113] <... exit_group resumed>) = ? [pid 6122] +++ exited with 0 +++ [pid 6163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6113] +++ exited with 0 +++ [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=23 /* 0.23 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... restart_syscall resumed>) = 0 [pid 5244] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./9/binderfs") = 0 [pid 5244] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./9/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [ 138.371936][ T5244] BTRFS info (device loop4): last unmount of filesystem 948a10e7-c397-467e-b016-5ea62d377b49 [pid 5240] rmdir("./9") = 0 [pid 5240] mkdir("./10", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6182 ./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x55558b77b760, 24) = 0 [pid 6182] chdir("./10") = 0 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4) = 4 [pid 6182] close(3) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6182] write(1, "executing program\n", 18) = 18 [pid 6182] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6182] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6182] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6183 attached [pid 6183] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6182] <... clone3 resumed> => {parent_tid=[6183]}, 88) = 6183 [pid 6183] <... rseq resumed>) = 0 [pid 6182] rt_sigprocmask(SIG_SETMASK, [], [pid 6183] set_robust_list(0x7f511f03f9a0, 24 [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6183] <... set_robust_list resumed>) = 0 [pid 6182] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] rt_sigprocmask(SIG_SETMASK, [], [pid 6182] <... futex resumed>) = 0 [pid 6183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6182] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6183] memfd_create("syzkaller", 0) = 3 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6165] <... write resumed>) = 16777216 [pid 6165] munmap(0x7f5116c00000, 138412032) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6165] <... ioctl resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6165] close(3 [pid 5244] newfstatat(AT_FDCWD, "./9/file0", [pid 6165] <... close resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6165] close(4 [pid 5244] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6165] <... close resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6165] mkdir("./file0", 0777 [pid 5244] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6165] <... mkdir resumed>) = 0 [pid 5244] newfstatat(4, "", [pid 6165] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./9/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./9") = 0 [pid 5244] mkdir("./10", 0777) = 0 [pid 6163] <... write resumed>) = 16777216 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6162] <... write resumed>) = 16777216 [pid 6162] munmap(0x7f5116c00000, 138412032 [pid 6163] munmap(0x7f5116c00000, 138412032 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 138.720513][ T6165] loop2: detected capacity change from 0 to 32768 [ 138.755307][ T6165] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6165) [pid 5244] close(3 [pid 6162] <... munmap resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6184 ./strace-static-x86_64: Process 6184 attached [pid 6163] <... munmap resumed>) = 0 [pid 6163] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6163] ioctl(4, LOOP_SET_FD, 3 [pid 6184] set_robust_list(0x55558b77b760, 24 [pid 6162] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6184] <... set_robust_list resumed>) = 0 [pid 6162] <... openat resumed>) = 4 [pid 6184] chdir("./10" [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6184] <... chdir resumed>) = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6163] <... ioctl resumed>) = 0 [pid 6184] setpgid(0, 0 [pid 6162] <... ioctl resumed>) = 0 [pid 6184] <... setpgid resumed>) = 0 [pid 6162] close(3) = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] close(4 [pid 6163] close(3 [pid 6184] <... openat resumed>) = 3 [pid 6162] <... close resumed>) = 0 [ 138.807201][ T6165] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 138.815167][ T6163] loop1: detected capacity change from 0 to 32768 [ 138.829992][ T6162] loop3: detected capacity change from 0 to 32768 [ 138.844967][ T6165] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 6162] mkdir("./file0", 0777 [pid 6163] <... close resumed>) = 0 [pid 6162] <... mkdir resumed>) = 0 [pid 6163] close(4 [pid 6184] write(3, "1000", 4 [pid 6162] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6163] <... close resumed>) = 0 [pid 6163] mkdir("./file0", 0777 [pid 6184] <... write resumed>) = 4 [pid 6163] <... mkdir resumed>) = 0 [pid 6163] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6184] close(3) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6184] write(1, "executing program\n", 18executing program ) = 18 [pid 6184] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6184] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6184] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 138.874133][ T6165] BTRFS info (device loop2): using free-space-tree [ 138.882726][ T6162] BTRFS: device /dev/loop3 (7:3) using temp-fsid 8027eeb2-afdf-4fa3-bc55-77b0b21092df [pid 6184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6184] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6184] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6193 attached => {parent_tid=[6193]}, 88) = 6193 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6193] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6193] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6193] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = 0 [pid 6184] <... futex resumed>) = 1 [ 138.921775][ T6162] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6162) [pid 6184] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] memfd_create("syzkaller", 0) = 3 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 138.962530][ T6163] BTRFS: device /dev/loop1 (7:1) using temp-fsid 16172b41-36ad-4219-b87b-ca4308e09331 [ 138.980710][ T6162] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 139.001119][ T6162] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 139.002617][ T6163] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6163) [ 139.023486][ T6162] BTRFS info (device loop3): using free-space-tree [ 139.054550][ T6163] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 139.092810][ T6163] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... mount resumed>) = 0 [pid 6165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6165] chdir("./file0") = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_CLR_FD) = 0 [pid 6165] close(4) = 0 [pid 6165] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6164] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... openat resumed>) = 4 [pid 6164] <... futex resumed>) = 0 [pid 6165] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6165] <... futex resumed>) = 0 [pid 6164] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6164] <... futex resumed>) = 0 [pid 6165] <... fallocate resumed>) = 0 [pid 6164] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] exit_group(0 [pid 6165] <... futex resumed>) = ? [pid 6164] <... exit_group resumed>) = ? [pid 6165] +++ exited with 0 +++ [pid 6164] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5242] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 139.166456][ T6163] BTRFS info (device loop1): using free-space-tree [pid 5242] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./10/binderfs") = 0 [pid 5242] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6162] <... mount resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] chdir("./file0") = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6162] ioctl(4, LOOP_CLR_FD) = 0 [pid 6162] close(4) = 0 [pid 6162] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6162] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] <... futex resumed>) = 0 [pid 6162] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6159] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... openat resumed>) = 4 [pid 6162] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6162] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] <... futex resumed>) = 0 [pid 6162] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6159] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6162] <... futex resumed>) = 0 [pid 6162] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] exit_group(0 [pid 6162] <... futex resumed>) = ? [pid 6159] <... exit_group resumed>) = ? [pid 6162] +++ exited with 0 +++ [pid 6159] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5243] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./10/binderfs") = 0 [ 139.332234][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] <... mount resumed>) = 0 [pid 6163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6163] chdir("./file0") = 0 [pid 6163] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6163] ioctl(4, LOOP_CLR_FD) = 0 [pid 6163] close(4) = 0 [pid 6163] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6158] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6163] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6163] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6158] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6163] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6163] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6158] exit_group(0) = ? [pid 6163] +++ exited with 0 +++ [pid 6158] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6158, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 139.400430][ T5243] BTRFS info (device loop3): last unmount of filesystem 8027eeb2-afdf-4fa3-bc55-77b0b21092df [pid 5241] unlink("./10/binderfs") = 0 [pid 5241] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6183] <... write resumed>) = 16777216 [pid 6183] munmap(0x7f5116c00000, 138412032) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] close(3) = 0 [pid 6183] close(4) = 0 [pid 6183] mkdir("./file0", 0777) = 0 [ 139.503723][ T5241] BTRFS info (device loop1): last unmount of filesystem 16172b41-36ad-4219-b87b-ca4308e09331 [ 139.533157][ T6183] loop0: detected capacity change from 0 to 32768 [pid 6183] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 139.564190][ T6183] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6183) [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [ 139.612007][ T6183] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] rmdir("./10/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./10") = 0 [pid 5243] mkdir("./11", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6235 attached , child_tidptr=0x55558b77b750) = 6235 [pid 6235] set_robust_list(0x55558b77b760, 24) = 0 [pid 6235] chdir("./11") = 0 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6235] setpgid(0, 0) = 0 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6235] write(3, "1000", 4) = 4 [pid 6235] close(3) = 0 [pid 6235] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6235] write(1, "executing program\n", 18) = 18 [pid 6235] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6235] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6235] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6236]}, 88) = 6236 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6235] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6236 attached ) = 0 [pid 6235] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6236] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6236] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] memfd_create("syzkaller", 0) = 3 [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 139.659501][ T6183] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.682139][ T6183] BTRFS info (device loop0): using free-space-tree [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./10/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./10") = 0 [pid 5242] mkdir("./11", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3 [pid 6193] <... write resumed>) = 16777216 [pid 5242] <... close resumed>) = 0 [pid 6193] munmap(0x7f5116c00000, 138412032 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6253 ./strace-static-x86_64: Process 6253 attached [pid 6253] set_robust_list(0x55558b77b760, 24 [pid 6193] <... munmap resumed>) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6253] <... set_robust_list resumed>) = 0 [pid 6253] chdir("./11" [pid 6193] <... openat resumed>) = 4 [pid 6193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] <... mount resumed>) = 0 [pid 6253] <... chdir resumed>) = 0 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6253] write(3, "1000", 4) = 4 [pid 6183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6253] close(3) = 0 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6253] write(1, "executing program\n", 18) = 18 [pid 6253] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... openat resumed>) = 3 [pid 6183] chdir("./file0" [pid 6253] <... futex resumed>) = 0 [pid 6183] <... chdir resumed>) = 0 [pid 6253] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6253] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6183] <... openat resumed>) = 4 [pid 6253] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6183] ioctl(4, LOOP_CLR_FD [pid 6253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6183] <... ioctl resumed>) = 0 [ 139.874807][ T6193] loop4: detected capacity change from 0 to 32768 [pid 6253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6183] close(4 [pid 6253] <... mmap resumed>) = 0x7f511f01f000 [pid 6193] close(3 [pid 6183] <... close resumed>) = 0 [pid 6253] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6193] <... close resumed>) = 0 [pid 6183] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... mprotect resumed>) = 0 [pid 6193] close(4 [pid 6183] <... futex resumed>) = 1 [pid 6182] <... futex resumed>) = 0 [pid 6253] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6193] <... close resumed>) = 0 [pid 6183] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6193] mkdir("./file0", 0777 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6182] <... futex resumed>) = 0 [pid 6253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6193] <... mkdir resumed>) = 0 [pid 6183] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6182] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog,"./strace-static-x86_64: Process 6254 attached [pid 6253] <... clone3 resumed> => {parent_tid=[6254]}, 88) = 6254 [pid 6183] <... openat resumed>) = 4 [pid 6254] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6253] rt_sigprocmask(SIG_SETMASK, [], [pid 6183] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6253] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6183] <... futex resumed>) = 1 [pid 6254] <... rseq resumed>) = 0 [pid 6254] set_robust_list(0x7f511f03f9a0, 24 [pid 6183] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] <... futex resumed>) = 0 [pid 6254] <... set_robust_list resumed>) = 0 [pid 6182] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], [pid 6183] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6183] <... fallocate resumed>) = 0 [pid 6182] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] memfd_create("syzkaller", 0 [pid 6183] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] exit_group(0) = ? [pid 6183] <... futex resumed>) = ? [pid 6254] <... memfd_create resumed>) = 3 [pid 6183] +++ exited with 0 +++ [pid 6182] +++ exited with 0 +++ [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=28 /* 0.28 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 6254] <... mmap resumed>) = 0x7f5116c00000 [pid 5240] <... restart_syscall resumed>) = 0 [pid 5240] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./10/binderfs") = 0 [ 139.955187][ T6193] BTRFS: device /dev/loop4 (7:4) using temp-fsid 5624b84b-ade3-41bf-a072-8b781f39676d [ 139.972720][ T6193] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6193) [pid 5240] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, [pid 6236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./10/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./10") = 0 [pid 5241] mkdir("./11", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6256 attached [ 140.064229][ T6193] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 140.088739][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 140.103952][ T6193] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 6256] set_robust_list(0x55558b77b760, 24 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6256 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6256] chdir("./11") = 0 [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6256] setpgid(0, 0) = 0 [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6256] write(3, "1000", 4) = 4 [pid 6256] close(3executing program ) = 0 [pid 6256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6256] write(1, "executing program\n", 18) = 18 [pid 6256] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6256] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6259 attached => {parent_tid=[6259]}, 88) = 6259 [pid 6256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6256] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6256] <... futex resumed>) = 0 [pid 6259] <... rseq resumed>) = 0 [pid 6259] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6256] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 140.142653][ T6193] BTRFS info (device loop4): using free-space-tree [pid 6259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6259] memfd_create("syzkaller", 0) = 3 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6193] <... mount resumed>) = 0 [pid 6236] <... write resumed>) = 16777216 [pid 6193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6236] munmap(0x7f5116c00000, 138412032 [pid 6193] chdir("./file0") = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_CLR_FD) = 0 [pid 6236] <... munmap resumed>) = 0 [pid 6193] close(4) = 0 [pid 6193] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6193] <... futex resumed>) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6236] ioctl(4, LOOP_SET_FD, 3 [pid 6193] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6184] <... futex resumed>) = 0 [pid 6193] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6184] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... openat resumed>) = 4 [pid 6193] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6193] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6184] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] <... fallocate resumed>) = 0 [pid 6184] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6193] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] exit_group(0 [pid 6193] <... futex resumed>) = ? [pid 6184] <... exit_group resumed>) = ? [pid 6193] +++ exited with 0 +++ [pid 6184] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=25 /* 0.25 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./10/binderfs") = 0 [pid 5244] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6236] <... ioctl resumed>) = 0 [pid 6236] close(3) = 0 [ 140.501954][ T6236] loop3: detected capacity change from 0 to 32768 [pid 6236] close(4) = 0 [pid 6236] mkdir("./file0", 0777) = 0 [ 140.569083][ T5244] BTRFS info (device loop4): last unmount of filesystem 5624b84b-ade3-41bf-a072-8b781f39676d [ 140.593015][ T6236] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6236) [pid 6236] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 140.691154][ T6236] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5240] newfstatat(AT_FDCWD, "./10/file0", [pid 5244] <... umount2 resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./10/file0", [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... openat resumed>) = 4 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(4, "", [pid 5244] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] newfstatat(4, "", [pid 5240] getdents64(4, [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./10/file0" [pid 5244] getdents64(4, [pid 5240] <... rmdir resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(3, [pid 5244] getdents64(4, [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4 [pid 5240] close(3 [pid 5244] <... close resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5240] rmdir("./10" [pid 5244] rmdir("./10/file0") = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] mkdir("./11", 0777 [pid 5244] close(3) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5244] rmdir("./10") = 0 [pid 5244] mkdir("./11", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5240] <... openat resumed>) = 3 [ 140.732787][ T6236] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.771931][ T6236] BTRFS info (device loop3): using free-space-tree [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5240] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5244] <... ioctl resumed>) = 0 [pid 5240] close(3) = 0 [pid 5244] close(3 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6288 attached [pid 5244] <... close resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 6288 [pid 6288] set_robust_list(0x55558b77b760, 24 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6289 ./strace-static-x86_64: Process 6289 attached [pid 6288] <... set_robust_list resumed>) = 0 [pid 6289] set_robust_list(0x55558b77b760, 24) = 0 [pid 6289] chdir("./11" [pid 6288] chdir("./11" [pid 6289] <... chdir resumed>) = 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6288] <... chdir resumed>) = 0 [pid 6289] <... prctl resumed>) = 0 [pid 6289] setpgid(0, 0 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6289] <... setpgid resumed>) = 0 [pid 6288] <... prctl resumed>) = 0 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6288] setpgid(0, 0 [pid 6289] <... openat resumed>) = 3 [pid 6288] <... setpgid resumed>) = 0 [pid 6289] write(3, "1000", 4) = 4 [pid 6289] close(3) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs" [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 6289] <... symlink resumed>) = 0 [pid 6288] <... openat resumed>) = 3 [pid 6289] write(1, "executing program\n", 18) = 18 [pid 6289] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6288] write(3, "1000", 4 [pid 6236] <... mount resumed>) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6288] <... write resumed>) = 4 [pid 6289] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] close(3 [pid 6236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6289] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6288] <... close resumed>) = 0 [pid 6236] <... openat resumed>) = 3 [pid 6289] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6236] chdir("./file0" [pid 6289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6292 attached [pid 6288] symlink("/dev/binderfs", "./binderfs" [pid 6236] <... chdir resumed>) = 0 [pid 6292] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6289] <... clone3 resumed> => {parent_tid=[6292]}, 88) = 6292 [pid 6236] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6292] <... rseq resumed>) = 0 [pid 6289] rt_sigprocmask(SIG_SETMASK, [], [pid 6292] set_robust_list(0x7f511f03f9a0, 24 [pid 6289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6292] <... set_robust_list resumed>) = 0 [pid 6289] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] rt_sigprocmask(SIG_SETMASK, [], [pid 6289] <... futex resumed>) = 0 [pid 6292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6292] memfd_create("syzkaller", 0 [pid 6288] <... symlink resumed>) = 0 executing program [pid 6288] write(1, "executing program\n", 18 [pid 6236] <... openat resumed>) = 4 [pid 6288] <... write resumed>) = 18 [pid 6236] ioctl(4, LOOP_CLR_FD [pid 6288] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... ioctl resumed>) = 0 [pid 6292] <... memfd_create resumed>) = 3 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] <... futex resumed>) = 0 [pid 6236] close(4 [pid 6292] <... mmap resumed>) = 0x7f5116c00000 [pid 6288] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6236] <... close resumed>) = 0 [pid 6288] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6236] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6236] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6235] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... openat resumed>) = 4 [pid 6235] <... futex resumed>) = 0 [pid 6235] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6236] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6236] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6235] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] <... mmap resumed>) = 0x7f511f01f000 [pid 6236] <... fallocate resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6288] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6236] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] exit_group(0 [pid 6288] <... mprotect resumed>) = 0 [pid 6236] <... futex resumed>) = ? [pid 6235] <... exit_group resumed>) = ? [pid 6288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6236] +++ exited with 0 +++ [pid 6235] +++ exited with 0 +++ [pid 6288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6293 attached => {parent_tid=[6293]}, 88) = 6293 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=26 /* 0.26 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 6293] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 6293] <... rseq resumed>) = 0 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] set_robust_list(0x7f511f03f9a0, 24 [pid 6288] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... set_robust_list resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6288] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] memfd_create("syzkaller", 0) = 3 [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6259] <... write resumed>) = 16777216 [pid 5243] <... restart_syscall resumed>) = 0 [pid 5243] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] munmap(0x7f5116c00000, 138412032 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./11/binderfs") = 0 [pid 5243] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] <... munmap resumed>) = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6259] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6259] close(3) = 0 [pid 6259] close(4) = 0 [ 141.033406][ T6259] loop1: detected capacity change from 0 to 32768 [ 141.043043][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6259] mkdir("./file0", 0777) = 0 [pid 6259] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6254] <... write resumed>) = 16777216 [pid 6254] munmap(0x7f5116c00000, 138412032) = 0 [pid 6254] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 141.073791][ T6259] BTRFS: device /dev/loop1 (7:1) using temp-fsid 68b5d843-57fe-4f62-83cf-0182b8c4170a [ 141.109368][ T6259] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6259) [pid 6254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6254] close(3) = 0 [pid 6254] close(4) = 0 [pid 6254] mkdir("./file0", 0777) = 0 [ 141.149854][ T6254] loop2: detected capacity change from 0 to 32768 [ 141.157355][ T6259] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 141.179267][ T6259] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 141.214938][ T6254] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6254) [ 141.246565][ T6259] BTRFS info (device loop1): using free-space-tree [pid 6254] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 141.285207][ T6254] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 141.342683][ T6254] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.351367][ T6254] BTRFS info (device loop2): using free-space-tree [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./11/file0" [pid 6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... rmdir resumed>) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./11") = 0 [pid 5243] mkdir("./12", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6316 ./strace-static-x86_64: Process 6316 attached [pid 6316] set_robust_list(0x55558b77b760, 24) = 0 [pid 6316] chdir("./12") = 0 [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6316] setpgid(0, 0) = 0 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6316] write(3, "1000", 4) = 4 [pid 6316] close(3) = 0 [pid 6316] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6316] write(1, "executing program\n", 18) = 18 [pid 6259] <... mount resumed>) = 0 [pid 6316] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6316] <... futex resumed>) = 0 [pid 6259] <... openat resumed>) = 3 [pid 6259] chdir("./file0") = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6316] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6259] ioctl(4, LOOP_CLR_FD [pid 6316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6259] <... ioctl resumed>) = 0 [pid 6316] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6259] close(4) = 0 [pid 6259] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6327 attached [pid 6327] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6316] <... clone3 resumed> => {parent_tid=[6327]}, 88) = 6327 [pid 6327] <... rseq resumed>) = 0 [pid 6316] rt_sigprocmask(SIG_SETMASK, [], [pid 6327] set_robust_list(0x7f511f03f9a0, 24 [pid 6316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6327] <... set_robust_list resumed>) = 0 [pid 6316] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6256] <... futex resumed>) = 0 [pid 6327] memfd_create("syzkaller", 0 [pid 6316] <... futex resumed>) = 0 [pid 6256] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... memfd_create resumed>) = 3 [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6316] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6327] <... mmap resumed>) = 0x7f5116c00000 [pid 6259] <... futex resumed>) = 0 [pid 6256] <... futex resumed>) = 1 [pid 6259] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6256] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... openat resumed>) = 4 [pid 6254] <... mount resumed>) = 0 [pid 6254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6259] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6256] <... futex resumed>) = 0 [pid 6259] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6256] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] <... fallocate resumed>) = 0 [pid 6256] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] <... openat resumed>) = 3 [pid 6259] <... futex resumed>) = 0 [pid 6259] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] exit_group(0 [pid 6254] chdir("./file0" [pid 6256] <... exit_group resumed>) = ? [pid 6254] <... chdir resumed>) = 0 [pid 6254] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6259] <... futex resumed>) = ? [pid 6259] +++ exited with 0 +++ [pid 6256] +++ exited with 0 +++ [pid 6254] <... openat resumed>) = 4 [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 6254] ioctl(4, LOOP_CLR_FD [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 6254] <... ioctl resumed>) = 0 [pid 6254] close(4) = 0 [pid 6254] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... futex resumed>) = 0 [pid 6253] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... futex resumed>) = 1 [pid 6253] <... futex resumed>) = 0 [pid 6254] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6253] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] <... restart_syscall resumed>) = 0 [pid 6254] <... openat resumed>) = 4 [pid 6254] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] <... futex resumed>) = 0 [pid 5241] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] <... futex resumed>) = 1 [pid 6253] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6253] <... futex resumed>) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6254] <... fallocate resumed>) = 0 [pid 5241] <... openat resumed>) = 3 [pid 6254] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] newfstatat(3, "", [pid 6254] <... futex resumed>) = 1 [pid 6253] <... futex resumed>) = 0 [pid 6254] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] exit_group(0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6254] <... futex resumed>) = ? [pid 6253] <... exit_group resumed>) = ? [pid 5241] getdents64(3, [pid 6254] +++ exited with 0 +++ [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6253] +++ exited with 0 +++ [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5241] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./11/binderfs" [pid 5242] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... unlink resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... openat resumed>) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./11/binderfs") = 0 [pid 5242] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6292] <... write resumed>) = 16777216 [pid 6292] munmap(0x7f5116c00000, 138412032) = 0 [ 141.734692][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 141.753897][ T5241] BTRFS info (device loop1): last unmount of filesystem 68b5d843-57fe-4f62-83cf-0182b8c4170a [pid 6292] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 6293] <... write resumed>) = 16777216 [pid 6292] <... ioctl resumed>) = 0 [pid 6292] close(3) = 0 [pid 6292] close(4) = 0 [pid 6292] mkdir("./file0", 0777) = 0 [ 141.816189][ T6292] loop4: detected capacity change from 0 to 32768 [pid 6292] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6293] munmap(0x7f5116c00000, 138412032) = 0 [pid 6293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 141.868408][ T6292] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6292) [pid 6293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6293] close(3) = 0 [ 141.916290][ T6293] loop0: detected capacity change from 0 to 32768 [ 141.925516][ T6292] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 141.952801][ T6292] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 6293] close(4) = 0 [pid 6293] mkdir("./file0", 0777) = 0 [pid 6293] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 141.972794][ T6292] BTRFS info (device loop4): using free-space-tree [ 142.000548][ T6293] BTRFS: device /dev/loop0 (7:0) using temp-fsid 743a983f-922b-403d-a3d2-986227446f29 [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./11/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [ 142.042932][ T6293] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6293) [pid 5241] rmdir("./11") = 0 [pid 5242] <... umount2 resumed>) = 0 [pid 5241] mkdir("./12", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6342 [pid 5242] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6342 attached [pid 6342] set_robust_list(0x55558b77b760, 24) = 0 [pid 6342] chdir("./12" [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... chdir resumed>) = 0 [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6342] setpgid(0, 0) = 0 [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6342] <... openat resumed>) = 3 [pid 6342] write(3, "1000", 4 [pid 5242] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6342] <... write resumed>) = 4 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] close(3 [pid 5242] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6342] <... close resumed>) = 0 [pid 6342] symlink("/dev/binderfs", "./binderfs" [pid 5242] <... openat resumed>) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, [pid 6342] <... symlink resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 executing program [pid 6342] write(1, "executing program\n", 18) = 18 [pid 5242] getdents64(4, [pid 6342] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6342] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6342] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] close(4 [pid 6342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] <... close resumed>) = 0 [pid 5242] rmdir("./11/file0" [pid 6342] <... mmap resumed>) = 0x7f511f01f000 [pid 6342] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 6342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] getdents64(3, [pid 6342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5242] close(3./strace-static-x86_64: Process 6346 attached ) = 0 [pid 6342] <... clone3 resumed> => {parent_tid=[6346]}, 88) = 6346 [ 142.104398][ T6293] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 142.142941][ T6293] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 5242] rmdir("./11" [pid 6346] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6342] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... rmdir resumed>) = 0 [pid 6346] <... rseq resumed>) = 0 [pid 6342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] mkdir("./12", 0777 [pid 6346] set_robust_list(0x7f511f03f9a0, 24 [pid 6342] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... mkdir resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6346] <... set_robust_list resumed>) = 0 [pid 6342] <... futex resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 6342] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3 [pid 6346] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... close resumed>) = 0 [pid 6292] <... mount resumed>) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6292] <... openat resumed>) = 3 [pid 6346] memfd_create("syzkaller", 0 [pid 6292] chdir("./file0") = 0 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6348 [pid 6292] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6346] <... memfd_create resumed>) = 3 [pid 6292] ioctl(4, LOOP_CLR_FD [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6292] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6348 attached [pid 6346] <... mmap resumed>) = 0x7f5116c00000 [pid 6292] close(4) = 0 [ 142.193067][ T6293] BTRFS info (device loop0): using free-space-tree [pid 6292] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] set_robust_list(0x55558b77b760, 24 [pid 6292] <... futex resumed>) = 1 [pid 6289] <... futex resumed>) = 0 [pid 6292] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... set_robust_list resumed>) = 0 [pid 6289] <... futex resumed>) = 0 [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6348] chdir("./12" [pid 6292] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6348] <... chdir resumed>) = 0 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6292] <... openat resumed>) = 4 [pid 6348] <... prctl resumed>) = 0 [pid 6292] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] setpgid(0, 0) = 0 [pid 6292] <... futex resumed>) = 1 [pid 6289] <... futex resumed>) = 0 [pid 6292] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] <... futex resumed>) = 0 [pid 6292] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6289] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6292] <... fallocate resumed>) = 0 [pid 6292] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... openat resumed>) = 3 [pid 6289] <... futex resumed>) = 0 [pid 6348] write(3, "1000", 4) = 4 [pid 6348] close(3) = 0 [pid 6289] exit_group(0 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6292] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] <... symlink resumed>) = 0 [pid 6292] <... futex resumed>) = ? executing program [pid 6289] <... exit_group resumed>) = ? [pid 6348] write(1, "executing program\n", 18) = 18 [pid 6292] +++ exited with 0 +++ [pid 6348] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6289] +++ exited with 0 +++ [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 6348] <... mmap resumed>) = 0x7f511f01f000 [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 6348] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5244] <... restart_syscall resumed>) = 0 [pid 6348] <... mprotect resumed>) = 0 [pid 6348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5244] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5244] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6348] <... clone3 resumed> => {parent_tid=[6356]}, 88) = 6356 [pid 5244] newfstatat(AT_FDCWD, "./11/binderfs", [pid 6348] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] unlink("./11/binderfs" [pid 6348] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... unlink resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 5244] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6356 attached [pid 6348] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6356] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6356] set_robust_list(0x7f511f03f9a0, 24 [pid 6327] <... write resumed>) = 16777216 [pid 6356] <... set_robust_list resumed>) = 0 [pid 6356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6327] munmap(0x7f5116c00000, 138412032 [pid 6356] memfd_create("syzkaller", 0) = 3 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 142.325495][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6327] <... munmap resumed>) = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6327] <... openat resumed>) = 4 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./11/file0", [pid 6327] ioctl(4, LOOP_SET_FD, 3 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./11/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 6293] <... mount resumed>) = 0 [pid 5244] rmdir("./11" [pid 6293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5244] <... rmdir resumed>) = 0 [pid 6293] chdir("./file0") = 0 [pid 6293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6293] ioctl(4, LOOP_CLR_FD) = 0 [pid 6293] close(4) = 0 [pid 6293] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6288] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] <... ioctl resumed>) = 0 [pid 6293] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6327] close(3) = 0 [pid 6293] <... openat resumed>) = 4 [pid 6327] close(4 [pid 5244] mkdir("./12", 0777 [pid 6293] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6288] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... mkdir resumed>) = 0 [pid 6327] <... close resumed>) = 0 [pid 6327] mkdir("./file0", 0777) = 0 [pid 6293] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6293] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6288] exit_group(0) = ? [ 142.403044][ T6327] loop3: detected capacity change from 0 to 32768 [pid 6327] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6293] +++ exited with 0 +++ [pid 6288] +++ exited with 0 +++ [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 5244] <... openat resumed>) = 3 [pid 5240] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5240] <... openat resumed>) = 3 [pid 5244] close(3) = 0 [pid 5240] newfstatat(3, "", [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6364 attached ) = -1 EINVAL (Invalid argument) [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6364 [pid 5240] newfstatat(AT_FDCWD, "./11/binderfs", [pid 6364] set_robust_list(0x55558b77b760, 24 [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6364] <... set_robust_list resumed>) = 0 [pid 5240] unlink("./11/binderfs") = 0 [pid 5240] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6364] chdir("./12") = 0 [pid 6364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6364] setpgid(0, 0) = 0 [ 142.466484][ T6327] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6327) [pid 6364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6364] write(3, "1000", 4) = 4 [pid 6364] close(3) = 0 [pid 6364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6364] write(1, "executing program\n", 18executing program ) = 18 [pid 6364] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [ 142.536372][ T5240] BTRFS info (device loop0): last unmount of filesystem 743a983f-922b-403d-a3d2-986227446f29 [ 142.558778][ T6327] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6364] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 142.583421][ T6327] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.592532][ T6327] BTRFS info (device loop3): using free-space-tree [pid 6364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6379]}, 88) = 6379 [pid 6364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6364] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6379 attached [pid 6379] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6379] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6379] memfd_create("syzkaller", 0) = 3 [pid 6346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6327] <... mount resumed>) = 0 [pid 6327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6327] chdir("./file0") = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6327] ioctl(4, LOOP_CLR_FD) = 0 [pid 6327] close(4) = 0 [pid 6327] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6316] <... futex resumed>) = 0 [pid 6316] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6316] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6327] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] <... futex resumed>) = 0 [pid 6316] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... futex resumed>) = 0 [pid 6316] <... futex resumed>) = 1 [pid 6327] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6316] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] <... fallocate resumed>) = 0 [pid 6327] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6316] <... futex resumed>) = 0 [pid 6316] exit_group(0) = ? [pid 6327] +++ exited with 0 +++ [pid 6316] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=32 /* 0.32 s */} --- [pid 5243] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./12/binderfs") = 0 [pid 5243] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6356] <... write resumed>) = 16777216 [ 142.918971][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6356] munmap(0x7f5116c00000, 138412032 [pid 5240] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... munmap resumed>) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6356] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5240] <... openat resumed>) = 4 [pid 6356] <... openat resumed>) = 4 [pid 5240] newfstatat(4, "", [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./11/file0" [pid 6356] <... ioctl resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 6356] close(3 [pid 5240] getdents64(3, [pid 6356] <... close resumed>) = 0 [pid 6356] close(4 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6356] <... close resumed>) = 0 [pid 5240] close(3 [pid 6356] mkdir("./file0", 0777 [pid 5240] <... close resumed>) = 0 [pid 6356] <... mkdir resumed>) = 0 [pid 5240] rmdir("./11" [pid 6356] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./12", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 143.026498][ T6356] loop2: detected capacity change from 0 to 32768 [ 143.057774][ T6356] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6356) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6382 attached [pid 6382] set_robust_list(0x55558b77b760, 24 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 6382 [pid 6382] <... set_robust_list resumed>) = 0 [pid 6382] chdir("./12") = 0 [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6382] setpgid(0, 0) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 143.097265][ T6356] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 143.122647][ T6356] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 6382] write(3, "1000", 4) = 4 [pid 6346] <... write resumed>) = 16777216 [pid 6382] close(3 [pid 6346] munmap(0x7f5116c00000, 138412032 [pid 6382] <... close resumed>) = 0 [pid 6382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6382] write(1, "executing program\n", 18executing program [pid 6379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6382] <... write resumed>) = 18 [pid 6346] <... munmap resumed>) = 0 [pid 6382] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6382] <... futex resumed>) = 0 [pid 6346] <... openat resumed>) = 4 [pid 6382] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6346] ioctl(4, LOOP_SET_FD, 3 [pid 6382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6346] <... ioctl resumed>) = 0 [pid 6382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6382] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6387]}, 88) = 6387 ./strace-static-x86_64: Process 6387 attached [pid 6382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6382] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6387] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6382] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6387] <... rseq resumed>) = 0 [pid 6346] close(3 [pid 6387] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6387] memfd_create("syzkaller", 0 [pid 6346] <... close resumed>) = 0 [pid 5243] <... umount2 resumed>) = 0 [pid 6346] close(4 [pid 5243] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6387] <... memfd_create resumed>) = 3 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6346] <... close resumed>) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6346] mkdir("./file0", 0777 [pid 5243] newfstatat(AT_FDCWD, "./12/file0", [pid 6346] <... mkdir resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6346] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 143.148682][ T6356] BTRFS info (device loop2): using free-space-tree [ 143.183663][ T6346] loop1: detected capacity change from 0 to 32768 [pid 6387] <... mmap resumed>) = 0x7f5116c00000 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [ 143.220630][ T6346] BTRFS: device /dev/loop1 (7:1) using temp-fsid 4c871759-4380-415f-b594-83c1abe676fe [ 143.230917][ T6346] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6346) [pid 5243] close(4) = 0 [pid 5243] rmdir("./12/file0") = 0 [ 143.273003][ T6346] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./12") = 0 [pid 5243] mkdir("./13", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [ 143.313651][ T6346] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6399 attached [pid 6399] set_robust_list(0x55558b77b760, 24) = 0 [pid 6399] chdir("./13") = 0 [pid 6399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6356] <... mount resumed>) = 0 [pid 6356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6356] chdir("./file0") = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 6399 [pid 6356] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6356] ioctl(4, LOOP_CLR_FD) = 0 [pid 6356] close(4) = 0 [pid 6356] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6356] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6399] <... prctl resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 6399] setpgid(0, 0 [pid 6348] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... setpgid resumed>) = 0 [pid 6356] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 1 [pid 6399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6348] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] <... openat resumed>) = 3 [pid 6356] <... openat resumed>) = 4 [pid 6399] write(3, "1000", 4 [pid 6356] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... write resumed>) = 4 [pid 6356] <... futex resumed>) = 1 [pid 6399] close(3 [pid 6356] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] <... futex resumed>) = 0 [pid 6399] <... close resumed>) = 0 [pid 6348] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] symlink("/dev/binderfs", "./binderfs" [pid 6356] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 1 [pid 6356] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6399] <... symlink resumed>) = 0 [pid 6356] <... fallocate resumed>) = 0 [pid 6348] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program [pid 6399] write(1, "executing program\n", 18 [pid 6356] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6399] <... write resumed>) = 18 [pid 6356] <... futex resumed>) = 0 [pid 6399] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [ 143.359589][ T6346] BTRFS info (device loop1): using free-space-tree [pid 6387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6356] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] exit_group(0 [pid 6399] <... futex resumed>) = 0 [pid 6356] <... futex resumed>) = ? [pid 6348] <... exit_group resumed>) = ? [pid 6399] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6356] +++ exited with 0 +++ [pid 6348] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 6399] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5242] <... restart_syscall resumed>) = 0 [pid 6399] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5242] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6399] <... clone3 resumed> => {parent_tid=[6406]}, 88) = 6406 [pid 5242] newfstatat(3, "", [pid 6399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6399] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] getdents64(3, [pid 6399] <... futex resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6399] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6406 attached [pid 5242] unlink("./12/binderfs" [pid 6406] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5242] <... unlink resumed>) = 0 [pid 6406] <... rseq resumed>) = 0 [pid 5242] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6406] memfd_create("syzkaller", 0) = 3 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 143.514238][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6346] <... mount resumed>) = 0 [pid 6346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6346] chdir("./file0") = 0 [pid 6346] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6346] ioctl(4, LOOP_CLR_FD) = 0 [pid 6346] close(4 [pid 6379] <... write resumed>) = 16777216 [pid 6346] <... close resumed>) = 0 [pid 6346] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6342] <... futex resumed>) = 0 [pid 6346] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6342] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] munmap(0x7f5116c00000, 138412032 [pid 6346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6342] <... futex resumed>) = 0 [pid 6346] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6342] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6387] <... write resumed>) = 16777216 [pid 6379] <... munmap resumed>) = 0 [pid 6346] <... openat resumed>) = 4 [pid 6387] munmap(0x7f5116c00000, 138412032 [pid 6346] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6342] <... futex resumed>) = 0 [pid 6379] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6379] ioctl(4, LOOP_SET_FD, 3 [pid 6346] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6342] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... fallocate resumed>) = 0 [pid 6342] <... futex resumed>) = 0 [pid 6346] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6346] <... futex resumed>) = 0 [pid 6379] <... ioctl resumed>) = 0 [pid 6387] <... munmap resumed>) = 0 [pid 6346] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6342] exit_group(0) = ? [pid 6346] <... futex resumed>) = ? [pid 6379] close(3) = 0 [pid 6379] close(4) = 0 [pid 6379] mkdir("./file0", 0777) = 0 [pid 6346] +++ exited with 0 +++ [pid 6342] +++ exited with 0 +++ [pid 6379] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6342, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=25 /* 0.25 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 6387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5241] <... restart_syscall resumed>) = 0 [pid 5241] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", [pid 6387] close(3) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6387] close(4) = 0 [pid 6387] mkdir("./file0", 0777) = 0 [pid 6387] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 143.683334][ T6379] loop4: detected capacity change from 0 to 32768 [ 143.705914][ T6379] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6379) [ 143.723019][ T6387] loop0: detected capacity change from 0 to 32768 [pid 5241] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./12/binderfs") = 0 [ 143.756562][ T6379] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 143.767365][ T6387] BTRFS: device /dev/loop0 (7:0) using temp-fsid ab790a58-261b-49dd-a191-3d98eab723d1 [ 143.788086][ T6379] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 143.797807][ T6387] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6387) [pid 5241] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 143.827816][ T6379] BTRFS info (device loop4): using free-space-tree [ 143.830045][ T5241] BTRFS info (device loop1): last unmount of filesystem 4c871759-4380-415f-b594-83c1abe676fe [ 143.853284][ T6387] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./12/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./12") = 0 [pid 5242] mkdir("./13", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [ 143.903185][ T6387] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 143.911859][ T6387] BTRFS info (device loop0): using free-space-tree [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6427 attached [pid 6427] set_robust_list(0x55558b77b760, 24) = 0 [pid 6427] chdir("./13") = 0 [pid 6427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6427] setpgid(0, 0) = 0 [pid 6427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6427 [pid 6427] <... openat resumed>) = 3 [pid 6427] write(3, "1000", 4) = 4 [pid 6427] close(3) = 0 [pid 6427] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6427] write(1, "executing program\n", 18) = 18 [pid 6427] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6427] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6434 attached => {parent_tid=[6434]}, 88) = 6434 [pid 6434] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6427] rt_sigprocmask(SIG_SETMASK, [], [pid 6434] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6434] rt_sigprocmask(SIG_SETMASK, [], [pid 6427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6427] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] memfd_create("syzkaller", 0 [pid 6427] <... futex resumed>) = 0 [pid 6434] <... memfd_create resumed>) = 3 [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6427] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6434] <... mmap resumed>) = 0x7f5116c00000 [pid 6379] <... mount resumed>) = 0 [pid 6379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6379] chdir("./file0") = 0 [pid 6379] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6379] ioctl(4, LOOP_CLR_FD) = 0 [pid 6379] close(4) = 0 [pid 6379] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6364] <... futex resumed>) = 0 [pid 6364] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6387] <... mount resumed>) = 0 [pid 6387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6379] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6364] <... futex resumed>) = 0 [pid 6364] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6379] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6364] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6387] chdir("./file0" [pid 6379] <... fallocate resumed>) = 0 [pid 6387] <... chdir resumed>) = 0 [pid 6379] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6379] <... futex resumed>) = 1 [pid 6364] <... futex resumed>) = 0 [pid 6387] <... openat resumed>) = 4 [pid 6364] exit_group(0 [pid 6387] ioctl(4, LOOP_CLR_FD [pid 6364] <... exit_group resumed>) = ? [pid 6387] <... ioctl resumed>) = 0 [pid 6379] +++ exited with 0 +++ [pid 6364] +++ exited with 0 +++ [pid 6387] close(4) = 0 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6364, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=24 /* 0.24 s */} --- [pid 6387] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6387] <... futex resumed>) = 1 [pid 6387] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] <... futex resumed>) = 0 [pid 6382] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6387] <... futex resumed>) = 0 [pid 6387] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6382] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6387] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6387] <... futex resumed>) = 1 [pid 5244] <... openat resumed>) = 3 [pid 6387] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] <... futex resumed>) = 0 [pid 5244] newfstatat(3, "", [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6382] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6387] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6382] <... futex resumed>) = 0 [pid 5244] getdents64(3, [pid 6387] <... fallocate resumed>) = 0 [pid 6382] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6387] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6387] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6387] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] exit_group(0 [pid 5244] newfstatat(AT_FDCWD, "./12/binderfs", [pid 6382] <... exit_group resumed>) = ? [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6387] <... futex resumed>) = ? [pid 5244] unlink("./12/binderfs" [pid 6387] +++ exited with 0 +++ [pid 6382] +++ exited with 0 +++ [pid 5244] <... unlink resumed>) = 0 [pid 5244] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./12/binderfs") = 0 [pid 5240] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... write resumed>) = 16777216 [ 144.300089][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6406] munmap(0x7f5116c00000, 138412032) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6406] close(3) = 0 [pid 6406] close(4) = 0 [pid 6406] mkdir("./file0", 0777) = 0 [ 144.342185][ T5240] BTRFS info (device loop0): last unmount of filesystem ab790a58-261b-49dd-a191-3d98eab723d1 [ 144.378058][ T6406] loop3: detected capacity change from 0 to 32768 [ 144.400949][ T6406] BTRFS: device /dev/loop3 (7:3) using temp-fsid 84292b44-87c9-4644-8700-49f5717d519c [pid 6406] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [ 144.454191][ T6406] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6406) [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./12/file0") = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5240] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] rmdir("./12") = 0 [pid 5241] mkdir("./13", 0777 [pid 5240] newfstatat(AT_FDCWD, "./12/file0", [pid 5241] <... mkdir resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6453 attached [pid 5240] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6453 [ 144.503942][ T6406] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5240] <... openat resumed>) = 4 [pid 6453] set_robust_list(0x55558b77b760, 24 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6453] <... set_robust_list resumed>) = 0 [pid 5240] getdents64(4, [pid 6453] chdir("./13" [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, [pid 6453] <... chdir resumed>) = 0 [pid 6453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4 [pid 6453] <... prctl resumed>) = 0 [pid 6453] setpgid(0, 0 [pid 5240] <... close resumed>) = 0 [pid 6453] <... setpgid resumed>) = 0 [pid 5240] rmdir("./12/file0") = 0 [pid 6453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6453] <... openat resumed>) = 3 [pid 5240] close(3 [pid 6453] write(3, "1000", 4 [pid 5240] <... close resumed>) = 0 [pid 6453] <... write resumed>) = 4 [pid 6453] close(3 [pid 5240] rmdir("./12" [pid 6453] <... close resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 6453] symlink("/dev/binderfs", "./binderfs" [pid 5240] mkdir("./13", 0777) = 0 [pid 6453] <... symlink resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FDexecuting program [pid 6453] write(1, "executing program\n", 18 [pid 5240] <... ioctl resumed>) = 0 [pid 6453] <... write resumed>) = 18 [pid 5240] close(3 [pid 6453] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... close resumed>) = 0 [pid 6453] <... futex resumed>) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6453] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 6458 [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6453] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6453] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6458 attached [ 144.548276][ T6406] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 144.585129][ T6406] BTRFS info (device loop3): using free-space-tree [], 8) = 0 [pid 6458] set_robust_list(0x55558b77b760, 24) = 0 [pid 6458] chdir("./13") = 0 [pid 6458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6458] setpgid(0, 0) = 0 [pid 6453] <... clone3 resumed> => {parent_tid=[6465]}, 88) = 6465 [pid 6458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6458] <... openat resumed>) = 3 [pid 6453] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] write(3, "1000", 4 [pid 6453] <... futex resumed>) = 0 [pid 6458] <... write resumed>) = 4 [pid 6453] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6458] close(3) = 0 [pid 6458] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6458] write(1, "executing program\n", 18./strace-static-x86_64: Process 6465 attached ) = 18 [pid 6465] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6458] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... rseq resumed>) = 0 [pid 6465] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6458] <... futex resumed>) = 0 [pid 6465] memfd_create("syzkaller", 0 [pid 6458] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6465] <... memfd_create resumed>) = 3 [pid 6458] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6465] <... mmap resumed>) = 0x7f5116c00000 [pid 6458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6458] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6406] <... mount resumed>) = 0 [pid 6458] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6406] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6471 attached [pid 6434] <... write resumed>) = 16777216 [pid 6406] chdir("./file0" [pid 6471] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6458] <... clone3 resumed> => {parent_tid=[6471]}, 88) = 6471 [pid 6406] <... chdir resumed>) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6458] rt_sigprocmask(SIG_SETMASK, [], [pid 6406] <... openat resumed>) = 4 [pid 6458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6406] ioctl(4, LOOP_CLR_FD [pid 6458] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... ioctl resumed>) = 0 [pid 6458] <... futex resumed>) = 0 [pid 6406] close(4 [pid 6458] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6406] <... close resumed>) = 0 [pid 6406] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6406] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6399] <... futex resumed>) = 0 [pid 6471] memfd_create("syzkaller", 0 [pid 6399] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... futex resumed>) = 0 [pid 6399] <... futex resumed>) = 1 [pid 6406] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6399] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... memfd_create resumed>) = 3 [pid 6406] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6434] munmap(0x7f5116c00000, 138412032 [pid 6406] <... futex resumed>) = 0 [pid 6399] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... munmap resumed>) = 0 [pid 6406] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6399] <... futex resumed>) = 0 [pid 6399] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6406] <... fallocate resumed>) = 0 [pid 6406] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6399] <... futex resumed>) = 0 [pid 6399] exit_group(0) = ? [pid 6406] +++ exited with 0 +++ [pid 6399] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6399, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=31 /* 0.31 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 6434] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6434] ioctl(4, LOOP_SET_FD, 3 [pid 5243] <... restart_syscall resumed>) = 0 [pid 5243] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6434] <... ioctl resumed>) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./12/file0", [pid 5243] <... openat resumed>) = 3 [pid 5243] newfstatat(3, "", [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, [pid 5244] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6434] close(3 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5243] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6434] <... close resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6434] close(4 [pid 5244] newfstatat(4, "", [pid 5243] newfstatat(AT_FDCWD, "./13/binderfs", [pid 6434] <... close resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] getdents64(4, [pid 5243] unlink("./13/binderfs" [pid 6434] mkdir("./file0", 0777 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] <... unlink resumed>) = 0 [pid 5244] getdents64(4, [pid 6434] <... mkdir resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] close(4 [pid 6434] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] <... close resumed>) = 0 [ 144.823939][ T6434] loop2: detected capacity change from 0 to 32768 [pid 5244] rmdir("./12/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./12") = 0 [pid 5244] mkdir("./13", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... openat resumed>) = 3 [ 144.870750][ T6434] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6434) [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6472 attached [pid 6472] set_robust_list(0x55558b77b760, 24) = 0 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6472 [pid 6472] chdir("./13") = 0 [pid 6472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6472] setpgid(0, 0) = 0 [ 144.969437][ T6434] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 144.985226][ T5243] BTRFS info (device loop3): last unmount of filesystem 84292b44-87c9-4644-8700-49f5717d519c [ 145.004954][ T6434] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 6472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6472] write(3, "1000", 4) = 4 [pid 6472] close(3) = 0 [pid 6472] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6472] write(1, "executing program\n", 18) = 18 [pid 6472] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6472] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6472] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6481 attached [pid 6481] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6472] <... clone3 resumed> => {parent_tid=[6481]}, 88) = 6481 [pid 6481] set_robust_list(0x7f511f03f9a0, 24 [pid 6472] rt_sigprocmask(SIG_SETMASK, [], [pid 6481] <... set_robust_list resumed>) = 0 [pid 6472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6481] rt_sigprocmask(SIG_SETMASK, [], [pid 6472] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 145.028387][ T6434] BTRFS info (device loop2): using free-space-tree [pid 6481] memfd_create("syzkaller", 0 [pid 6472] <... futex resumed>) = 0 [pid 6481] <... memfd_create resumed>) = 3 [pid 6481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6472] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6434] <... mount resumed>) = 0 [pid 6434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6434] chdir("./file0") = 0 [pid 6434] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6434] <... openat resumed>) = 4 [pid 6434] ioctl(4, LOOP_CLR_FD) = 0 [pid 6434] close(4) = 0 [pid 6434] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6427] <... futex resumed>) = 0 [pid 6434] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6434] <... futex resumed>) = 0 [pid 6427] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6434] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6427] <... futex resumed>) = 0 [pid 6434] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6427] <... futex resumed>) = 0 [pid 6434] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6427] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... fallocate resumed>) = 0 [pid 6434] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6427] <... futex resumed>) = 0 [pid 6434] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] exit_group(0 [pid 6434] <... futex resumed>) = ? [pid 6427] <... exit_group resumed>) = ? [pid 6434] +++ exited with 0 +++ [pid 6427] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6427, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5242] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./13/binderfs") = 0 [ 145.305392][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5242] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5242] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6465] <... write resumed>) = 16777216 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... umount2 resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6465] munmap(0x7f5116c00000, 138412032 [pid 5242] <... openat resumed>) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, [pid 5243] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4 [pid 5243] newfstatat(AT_FDCWD, "./13/file0", [pid 5242] <... close resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] rmdir("./13/file0" [pid 5243] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... rmdir resumed>) = 0 [pid 5242] getdents64(3, [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] <... openat resumed>) = 4 [pid 5242] close(3 [pid 5243] newfstatat(4, "", [pid 5242] <... close resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] rmdir("./13" [pid 5243] getdents64(4, [pid 5242] <... rmdir resumed>) = 0 [pid 6465] <... munmap resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] mkdir("./14", 0777 [pid 6465] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5243] getdents64(4, [pid 6465] <... openat resumed>) = 4 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] <... mkdir resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6465] ioctl(4, LOOP_SET_FD, 3 [pid 5243] close(4 [pid 6465] <... ioctl resumed>) = 0 [pid 5243] <... close resumed>) = 0 [pid 6465] close(3 [pid 5242] <... openat resumed>) = 3 [pid 5243] rmdir("./13/file0" [pid 6465] <... close resumed>) = 0 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 6465] close(4 [pid 5243] <... rmdir resumed>) = 0 [pid 5242] <... ioctl resumed>) = 0 [pid 6465] <... close resumed>) = 0 [pid 5243] getdents64(3, [pid 5242] close(3 [pid 6465] mkdir("./file0", 0777 [pid 5242] <... close resumed>) = 0 [pid 6465] <... mkdir resumed>) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6465] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./13" [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6490 [pid 5243] <... rmdir resumed>) = 0 [ 145.484404][ T6465] loop1: detected capacity change from 0 to 32768 [pid 5243] mkdir("./14", 0777./strace-static-x86_64: Process 6490 attached ) = 0 [pid 6490] set_robust_list(0x55558b77b760, 24 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6490] <... set_robust_list resumed>) = 0 [pid 6490] chdir("./14" [pid 5243] <... openat resumed>) = 3 [pid 6490] <... chdir resumed>) = 0 [pid 5243] ioctl(3, LOOP_CLR_FD [pid 6490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6490] <... prctl resumed>) = 0 [pid 5243] close(3 [pid 6490] setpgid(0, 0 [pid 5243] <... close resumed>) = 0 [pid 6490] <... setpgid resumed>) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6491 attached [pid 6490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6491] set_robust_list(0x55558b77b760, 24 [pid 6490] <... openat resumed>) = 3 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 6491 [ 145.523282][ T6465] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6465) [pid 6491] <... set_robust_list resumed>) = 0 [pid 6490] write(3, "1000", 4 [pid 6481] <... write resumed>) = 16777216 [pid 6491] chdir("./14" [pid 6490] <... write resumed>) = 4 [pid 6481] munmap(0x7f5116c00000, 138412032 [pid 6491] <... chdir resumed>) = 0 [pid 6490] close(3 [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6490] <... close resumed>) = 0 [pid 6491] setpgid(0, 0 [pid 6490] symlink("/dev/binderfs", "./binderfs" [pid 6481] <... munmap resumed>) = 0 [pid 6491] <... setpgid resumed>) = 0 [pid 6490] <... symlink resumed>) = 0 [pid 6481] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6490] write(1, "executing program\n", 18 [pid 6481] <... openat resumed>) = 4 executing program [pid 6491] <... openat resumed>) = 3 [pid 6490] <... write resumed>) = 18 [pid 6481] ioctl(4, LOOP_SET_FD, 3 [pid 6491] write(3, "1000", 4 [ 145.559227][ T6465] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 145.572209][ T6465] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 145.581895][ T6465] BTRFS info (device loop1): using free-space-tree [pid 6490] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] <... write resumed>) = 4 [pid 6490] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6491] close(3 [pid 6490] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6491] <... close resumed>) = 0 [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6491] symlink("/dev/binderfs", "./binderfs" [pid 6490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6491] <... symlink resumed>) = 0 [pid 6490] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 6491] write(1, "executing program\n", 18 [pid 6490] <... mprotect resumed>) = 0 [pid 6491] <... write resumed>) = 18 [pid 6490] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6491] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6481] <... ioctl resumed>) = 0 [pid 6490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6481] close(3) = 0 ./strace-static-x86_64: Process 6494 attached [pid 6481] close(4 [pid 6494] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6491] <... futex resumed>) = 0 [pid 6490] <... clone3 resumed> => {parent_tid=[6494]}, 88) = 6494 [pid 6481] <... close resumed>) = 0 [pid 6494] <... rseq resumed>) = 0 [pid 6491] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6490] rt_sigprocmask(SIG_SETMASK, [], [pid 6481] mkdir("./file0", 0777 [pid 6494] set_robust_list(0x7f511f03f9a0, 24 [pid 6491] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6491] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 145.609899][ T6481] loop4: detected capacity change from 0 to 32768 [pid 6490] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... set_robust_list resumed>) = 0 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6490] <... futex resumed>) = 0 [pid 6481] <... mkdir resumed>) = 0 [pid 6471] <... write resumed>) = 16777216 [pid 6494] rt_sigprocmask(SIG_SETMASK, [], [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6490] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6481] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6491] <... mmap resumed>) = 0x7f511f01f000 [pid 6494] memfd_create("syzkaller", 0 [pid 6491] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6494] <... memfd_create resumed>) = 3 [pid 6494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6471] munmap(0x7f5116c00000, 138412032 [pid 6494] <... mmap resumed>) = 0x7f5116c00000 [pid 6491] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6502 attached [pid 6502] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6491] <... clone3 resumed> => {parent_tid=[6502]}, 88) = 6502 [pid 6502] <... rseq resumed>) = 0 [pid 6491] rt_sigprocmask(SIG_SETMASK, [], [pid 6502] set_robust_list(0x7f511f03f9a0, 24 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6491] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6502] <... set_robust_list resumed>) = 0 [pid 6502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6502] memfd_create("syzkaller", 0) = 3 [pid 6502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6471] <... munmap resumed>) = 0 [pid 6471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 145.662246][ T6481] BTRFS: device /dev/loop4 (7:4) using temp-fsid c29f7e71-52b3-4867-8ca1-1670d65b0fc7 [pid 6471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6471] close(3) = 0 [pid 6471] close(4) = 0 [pid 6471] mkdir("./file0", 0777) = 0 [ 145.715307][ T6471] loop0: detected capacity change from 0 to 32768 [ 145.721895][ T6481] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6481) [ 145.817724][ T6471] BTRFS: device /dev/loop0 (7:0) using temp-fsid 274d716e-8daf-43fe-bb9c-bbdf06976d3b [ 145.832783][ T6481] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 145.856604][ T6471] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6471) [pid 6471] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 145.900365][ T6481] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 145.922293][ T6471] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6465] <... mount resumed>) = 0 [ 145.958316][ T6481] BTRFS info (device loop4): using free-space-tree [ 145.963498][ T6471] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 6465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6465] chdir("./file0") = 0 [pid 6465] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6465] ioctl(4, LOOP_CLR_FD) = 0 [pid 6465] close(4) = 0 [pid 6465] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6453] <... futex resumed>) = 0 [pid 6465] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6453] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6453] <... futex resumed>) = 0 [pid 6465] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [ 146.003353][ T6471] BTRFS info (device loop0): using free-space-tree [pid 6453] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6465] <... openat resumed>) = 4 [pid 6465] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6453] <... futex resumed>) = 0 [pid 6465] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6453] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6453] <... futex resumed>) = 0 [pid 6465] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6453] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6465] <... fallocate resumed>) = 0 [pid 6465] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6453] <... futex resumed>) = 0 [pid 6453] exit_group(0) = ? [pid 6465] +++ exited with 0 +++ [pid 6453] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6453, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./13/binderfs") = 0 [pid 5241] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 146.135941][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6481] <... mount resumed>) = 0 [pid 6481] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6481] chdir("./file0") = 0 [pid 6481] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6481] ioctl(4, LOOP_CLR_FD) = 0 [pid 6481] close(4) = 0 [pid 6481] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6481] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6472] <... futex resumed>) = 0 [pid 6481] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6472] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6481] <... openat resumed>) = 4 [pid 6481] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6472] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6472] <... futex resumed>) = 0 [pid 6481] <... fallocate resumed>) = 0 [pid 6472] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6481] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6472] exit_group(0) = ? [pid 6481] +++ exited with 0 +++ [pid 6472] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6472, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./13/binderfs") = 0 [pid 5244] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6471] <... mount resumed>) = 0 [pid 6471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6471] chdir("./file0") = 0 [pid 6471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6471] ioctl(4, LOOP_CLR_FD) = 0 [pid 6471] close(4) = 0 [pid 6471] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6471] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] <... futex resumed>) = 0 [pid 6458] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6458] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... futex resumed>) = 0 [pid 6471] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6471] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6471] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6458] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... fallocate resumed>) = 0 [pid 6458] <... futex resumed>) = 0 [pid 6471] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... futex resumed>) = 0 [pid 6458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6471] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] exit_group(0 [pid 6471] <... futex resumed>) = ? [pid 6458] <... exit_group resumed>) = ? [pid 6471] +++ exited with 0 +++ [pid 6458] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6458, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=32 /* 0.32 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... restart_syscall resumed>) = 0 [ 146.320588][ T5244] BTRFS info (device loop4): last unmount of filesystem c29f7e71-52b3-4867-8ca1-1670d65b0fc7 [pid 5241] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6494] <... write resumed>) = 16777216 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6494] munmap(0x7f5116c00000, 138412032 [pid 5240] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... openat resumed>) = 4 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(4, "", [pid 5240] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, [pid 5240] <... openat resumed>) = 3 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] newfstatat(3, "", [pid 5241] getdents64(4, [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] getdents64(3, [pid 5241] close(4 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... close resumed>) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] rmdir("./13/file0" [pid 5240] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5241] <... rmdir resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./13/binderfs" [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] <... unlink resumed>) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./13") = 0 [pid 5240] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] mkdir("./14", 0777) = 0 [pid 6494] <... munmap resumed>) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5244] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... openat resumed>) = 3 [pid 6494] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5244] newfstatat(AT_FDCWD, "./13/file0", [pid 5241] ioctl(3, LOOP_CLR_FD [pid 6494] <... openat resumed>) = 4 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6494] ioctl(4, LOOP_SET_FD, 3 [pid 5244] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] close(3 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... close resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6544 attached [pid 6544] set_robust_list(0x55558b77b760, 24 [pid 6494] <... ioctl resumed>) = 0 [pid 5244] newfstatat(4, "", [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6544 [pid 6544] <... set_robust_list resumed>) = 0 [pid 6544] chdir("./14") = 0 [pid 6494] close(3 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6494] <... close resumed>) = 0 [pid 5244] getdents64(4, [pid 6494] close(4 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6544] <... prctl resumed>) = 0 [pid 6544] setpgid(0, 0 [pid 6494] <... close resumed>) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6544] <... setpgid resumed>) = 0 [pid 6494] mkdir("./file0", 0777 [pid 5244] close(4 [pid 6544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... close resumed>) = 0 [pid 6494] <... mkdir resumed>) = 0 [pid 5244] rmdir("./13/file0" [pid 6544] <... openat resumed>) = 3 [pid 6494] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] <... rmdir resumed>) = 0 [pid 6544] write(3, "1000", 4 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6544] <... write resumed>) = 4 [ 146.462818][ T6494] loop2: detected capacity change from 0 to 32768 [ 146.492465][ T5240] BTRFS info (device loop0): last unmount of filesystem 274d716e-8daf-43fe-bb9c-bbdf06976d3b [pid 6544] close(3 [pid 5244] close(3) = 0 [pid 6544] <... close resumed>) = 0 [pid 6544] symlink("/dev/binderfs", "./binderfs" [pid 5244] rmdir("./13"executing program [pid 6544] <... symlink resumed>) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5244] mkdir("./14", 0777 [pid 6544] write(1, "executing program\n", 18) = 18 [pid 6544] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... mkdir resumed>) = 0 [pid 6544] <... futex resumed>) = 0 [pid 6544] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 6544] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(3 [pid 6544] <... mprotect resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 6544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6545 attached [ 146.532268][ T6494] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6494) , child_tidptr=0x55558b77b750) = 6545 [pid 6544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6546 attached [pid 6545] set_robust_list(0x55558b77b760, 24 [pid 6546] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6545] <... set_robust_list resumed>) = 0 [pid 6546] <... rseq resumed>) = 0 [pid 6545] chdir("./14" [pid 6546] set_robust_list(0x7f511f03f9a0, 24 [pid 6545] <... chdir resumed>) = 0 [pid 6546] <... set_robust_list resumed>) = 0 [pid 6545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6546] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] <... prctl resumed>) = 0 [pid 6546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] <... clone3 resumed> => {parent_tid=[6546]}, 88) = 6546 [pid 6546] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6544] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] setpgid(0, 0 [pid 6544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] <... setpgid resumed>) = 0 [pid 6545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6545] write(3, "1000", 4) = 4 [pid 6545] close(3) = 0 [pid 6544] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6546] <... futex resumed>) = 0 executing program [pid 6546] memfd_create("syzkaller", 0 [pid 6545] write(1, "executing program\n", 18) = 18 [pid 6545] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... memfd_create resumed>) = 3 [pid 6545] <... futex resumed>) = 0 [pid 6546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6545] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6546] <... mmap resumed>) = 0x7f5116c00000 [pid 6545] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 146.608366][ T6494] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 146.643724][ T6494] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 146.652406][ T6494] BTRFS info (device loop2): using free-space-tree [pid 6544] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6545] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6548]}, 88) = 6548 [pid 6545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6545] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6548 attached [pid 6548] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 6548] set_robust_list(0x7f511f03f9a0, 24 [pid 5240] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./13/file0", [pid 6548] <... set_robust_list resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6548] memfd_create("syzkaller", 0 [pid 5240] <... openat resumed>) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6548] <... memfd_create resumed>) = 3 [pid 6548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6548] <... mmap resumed>) = 0x7f5116c00000 [pid 5240] getdents64(4, [pid 6502] <... write resumed>) = 16777216 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6502] munmap(0x7f5116c00000, 138412032 [pid 5240] close(4 [pid 6502] <... munmap resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5240] rmdir("./13/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./13") = 0 [pid 5240] mkdir("./14", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6562 attached [pid 6562] set_robust_list(0x55558b77b760, 24 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 6562 [pid 6562] <... set_robust_list resumed>) = 0 [pid 6562] chdir("./14") = 0 [pid 6562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6562] setpgid(0, 0) = 0 [pid 6562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6562] write(3, "1000", 4) = 4 [pid 6562] close(3) = 0 [pid 6562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6502] openat(AT_FDCWD, "/dev/loop3", O_RDWR executing program [pid 6562] write(1, "executing program\n", 18 [pid 6502] <... openat resumed>) = 4 [pid 6562] <... write resumed>) = 18 [pid 6502] ioctl(4, LOOP_SET_FD, 3 [pid 6562] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6562] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6564 attached => {parent_tid=[6564]}, 88) = 6564 [pid 6562] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6564] <... rseq resumed>) = 0 [pid 6562] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] set_robust_list(0x7f511f03f9a0, 24 [pid 6562] <... futex resumed>) = 0 [pid 6564] <... set_robust_list resumed>) = 0 [pid 6562] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6564] memfd_create("syzkaller", 0 [pid 6502] <... ioctl resumed>) = 0 [pid 6502] close(3 [pid 6564] <... memfd_create resumed>) = 3 [pid 6502] <... close resumed>) = 0 [ 146.840828][ T6502] loop3: detected capacity change from 0 to 32768 [pid 6564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6502] close(4 [pid 6564] <... mmap resumed>) = 0x7f5116c00000 [pid 6502] <... close resumed>) = 0 [pid 6494] <... mount resumed>) = 0 [pid 6502] mkdir("./file0", 0777 [pid 6494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6502] <... mkdir resumed>) = 0 [pid 6494] <... openat resumed>) = 3 [pid 6502] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6494] chdir("./file0") = 0 [pid 6494] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6494] ioctl(4, LOOP_CLR_FD) = 0 [pid 6494] close(4) = 0 [pid 6494] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6494] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6490] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... openat resumed>) = 4 [pid 6490] <... futex resumed>) = 0 [pid 6494] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] <... futex resumed>) = 0 [pid 6490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6490] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6490] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6494] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6494] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6494] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6490] exit_group(0 [pid 6494] <... futex resumed>) = ? [pid 6490] <... exit_group resumed>) = ? [pid 6494] +++ exited with 0 +++ [pid 6490] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6490, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 6546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] <... restart_syscall resumed>) = 0 [pid 5242] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 146.945450][ T6502] BTRFS: device /dev/loop3 (7:3) using temp-fsid 9240246e-180b-4fb9-ae20-2c862a1e4382 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./14/binderfs") = 0 [ 146.993511][ T6502] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6502) [ 147.084004][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 147.112972][ T6502] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 147.156433][ T6502] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 147.192683][ T6502] BTRFS info (device loop3): using free-space-tree [pid 5242] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5242] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] <... openat resumed>) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./14/file0") = 0 [pid 6502] <... mount resumed>) = 0 [pid 5242] getdents64(3, [pid 6502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6502] <... openat resumed>) = 3 [pid 5242] close(3 [pid 6502] chdir("./file0" [pid 5242] <... close resumed>) = 0 [pid 6502] <... chdir resumed>) = 0 [pid 5242] rmdir("./14" [pid 6502] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5242] <... rmdir resumed>) = 0 [pid 6502] <... openat resumed>) = 4 [pid 5242] mkdir("./15", 0777 [pid 6502] ioctl(4, LOOP_CLR_FD [pid 5242] <... mkdir resumed>) = 0 [pid 6502] <... ioctl resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6502] close(4 [pid 5242] <... openat resumed>) = 3 [pid 6502] <... close resumed>) = 0 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 6502] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... ioctl resumed>) = 0 [pid 6502] <... futex resumed>) = 1 [pid 5242] close(3 [pid 6502] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] <... close resumed>) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6583 attached [pid 6583] set_robust_list(0x55558b77b760, 24) = 0 [pid 6491] <... futex resumed>) = 0 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6583 [pid 6491] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] chdir("./15" [pid 6502] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = 1 [pid 6583] <... chdir resumed>) = 0 [pid 6502] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6491] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6502] <... openat resumed>) = 4 [pid 6583] <... prctl resumed>) = 0 [pid 6583] setpgid(0, 0) = 0 [pid 6583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6502] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] <... openat resumed>) = 3 [pid 6583] write(3, "1000", 4 [pid 6502] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6583] <... write resumed>) = 4 [pid 6583] close(3 [pid 6502] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6491] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] <... fallocate resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 6502] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6502] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6502] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] exit_group(0 [pid 6502] <... futex resumed>) = ? [pid 6491] <... exit_group resumed>) = ? [pid 6502] +++ exited with 0 +++ [pid 6583] <... close resumed>) = 0 [pid 6583] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6491] +++ exited with 0 +++ [pid 6583] write(1, "executing program\n", 18) = 18 [pid 6583] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6491, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 6583] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5243] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6583] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 5243] <... openat resumed>) = 3 [pid 6583] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] newfstatat(3, "", [pid 6583] <... mprotect resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6583] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] getdents64(3, [pid 6583] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 6583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6584 attached ) = -1 EINVAL (Invalid argument) [pid 6584] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6583] <... clone3 resumed> => {parent_tid=[6584]}, 88) = 6584 [pid 5243] newfstatat(AT_FDCWD, "./14/binderfs", [pid 6584] <... rseq resumed>) = 0 [pid 6583] rt_sigprocmask(SIG_SETMASK, [], [pid 6584] set_robust_list(0x7f511f03f9a0, 24 [pid 6583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] <... set_robust_list resumed>) = 0 [pid 6583] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] rt_sigprocmask(SIG_SETMASK, [], [pid 6583] <... futex resumed>) = 0 [pid 6584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] memfd_create("syzkaller", 0 [pid 6583] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6584] <... memfd_create resumed>) = 3 [pid 5243] unlink("./14/binderfs") = 0 [pid 5243] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 147.481670][ T5243] BTRFS info (device loop3): last unmount of filesystem 9240246e-180b-4fb9-ae20-2c862a1e4382 [pid 6546] <... write resumed>) = 16777216 [pid 6546] munmap(0x7f5116c00000, 138412032) = 0 [pid 6546] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6546] close(3) = 0 [pid 6546] close(4) = 0 [ 147.682830][ T6546] loop1: detected capacity change from 0 to 32768 [pid 6546] mkdir("./file0", 0777) = 0 [pid 6546] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... umount2 resumed>) = 0 [pid 6548] <... write resumed>) = 16777216 [ 147.783188][ T6546] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6546) [pid 5243] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6548] munmap(0x7f5116c00000, 138412032 [pid 5243] close(4) = 0 [pid 5243] rmdir("./14/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./14") = 0 [pid 5243] mkdir("./15", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6585 attached [pid 6585] set_robust_list(0x55558b77b760, 24 [pid 6584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6585] <... set_robust_list resumed>) = 0 [pid 6564] <... write resumed>) = 16777216 [pid 6548] <... munmap resumed>) = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 6585 [pid 6585] chdir("./15") = 0 [pid 6585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6585] setpgid(0, 0 [pid 6548] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6548] ioctl(4, LOOP_SET_FD, 3 [pid 6585] <... setpgid resumed>) = 0 [pid 6585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6585] write(3, "1000", 4) = 4 [pid 6564] munmap(0x7f5116c00000, 138412032 [pid 6585] close(3) = 0 [pid 6585] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6585] write(1, "executing program\n", 18 [pid 6548] <... ioctl resumed>) = 0 [pid 6585] <... write resumed>) = 18 [pid 6548] close(3) = 0 [pid 6548] close(4) = 0 [pid 6548] mkdir("./file0", 0777) = 0 [ 147.883170][ T6546] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 147.903954][ T6548] loop4: detected capacity change from 0 to 32768 [ 147.917210][ T6546] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 6548] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6585] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6585] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6564] <... munmap resumed>) = 0 [pid 6585] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6564] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6564] <... openat resumed>) = 4 [pid 6585] <... mmap resumed>) = 0x7f511f01f000 [pid 6585] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6564] ioctl(4, LOOP_SET_FD, 3 [pid 6585] <... mprotect resumed>) = 0 [ 147.938720][ T6548] BTRFS: device /dev/loop4 (7:4) using temp-fsid 54bb1877-bcc8-4e75-b41c-a6efbb34f547 [ 147.950416][ T6546] BTRFS info (device loop1): using free-space-tree [ 147.963861][ T6548] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6548) [pid 6585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6564] <... ioctl resumed>) = 0 [pid 6564] close(3) = 0 [pid 6564] close(4 [ 147.983724][ T6564] loop0: detected capacity change from 0 to 32768 [pid 6585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6564] <... close resumed>) = 0 [pid 6585] <... clone3 resumed> => {parent_tid=[6596]}, 88) = 6596 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6596 attached NULL, 8) = 0 [pid 6564] mkdir("./file0", 0777 [pid 6585] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6596] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6585] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6564] <... mkdir resumed>) = 0 [pid 6596] <... rseq resumed>) = 0 [pid 6596] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6596] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6596] memfd_create("syzkaller", 0) = 3 [ 148.057252][ T6564] BTRFS: device /dev/loop0 (7:0) using temp-fsid b517bd63-40e6-4e5a-84dd-72b81238c9c6 [ 148.067522][ T6548] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 148.090532][ T6548] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 6596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 148.099225][ T6564] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6564) [ 148.116267][ T6548] BTRFS info (device loop4): using free-space-tree [ 148.152907][ T6564] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6546] <... mount resumed>) = 0 [pid 6546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6546] chdir("./file0") = 0 [pid 6546] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6546] ioctl(4, LOOP_CLR_FD) = 0 [ 148.202897][ T6564] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.212348][ T6564] BTRFS info (device loop0): using free-space-tree [pid 6546] close(4) = 0 [pid 6546] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6544] <... futex resumed>) = 0 [pid 6544] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6544] <... futex resumed>) = 0 [pid 6544] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] <... openat resumed>) = 4 [pid 6546] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6544] <... futex resumed>) = 0 [pid 6546] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6544] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... fallocate resumed>) = 0 [pid 6544] <... futex resumed>) = 0 [pid 6546] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] <... futex resumed>) = 0 [pid 6544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6546] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6544] exit_group(0 [pid 6546] <... futex resumed>) = ? [pid 6544] <... exit_group resumed>) = ? [pid 6546] +++ exited with 0 +++ [pid 6544] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6544, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=21 /* 0.21 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./14/binderfs") = 0 [pid 5241] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6584] <... write resumed>) = 16777216 [pid 6584] munmap(0x7f5116c00000, 138412032) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6584] ioctl(4, LOOP_SET_FD, 3 [pid 6548] <... mount resumed>) = 0 [pid 6548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6548] chdir("./file0") = 0 [pid 6548] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6548] ioctl(4, LOOP_CLR_FD) = 0 [pid 6548] close(4) = 0 [pid 6548] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6548] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... mount resumed>) = 0 [pid 6564] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6548] <... futex resumed>) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6564] chdir("./file0" [pid 6545] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... chdir resumed>) = 0 [pid 6545] <... futex resumed>) = 0 [pid 6564] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6545] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... ioctl resumed>) = 0 [pid 6564] <... openat resumed>) = 4 [pid 6564] ioctl(4, LOOP_CLR_FD) = 0 [pid 6548] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6564] close(4 [pid 6548] <... fallocate resumed>) = 0 [pid 6564] <... close resumed>) = 0 [pid 6564] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6562] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] exit_group(0 [pid 6562] <... futex resumed>) = 0 [pid 6545] <... exit_group resumed>) = ? [pid 6562] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6548] +++ exited with 0 +++ [pid 6545] +++ exited with 0 +++ [pid 6584] close(3 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6545, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 6564] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 6564] <... openat resumed>) = 4 [pid 6564] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6564] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6562] <... futex resumed>) = 0 [pid 5244] <... restart_syscall resumed>) = 0 [pid 6564] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6562] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... close resumed>) = 0 [pid 6564] <... fallocate resumed>) = 0 [pid 5244] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 148.344333][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 148.377460][ T6584] loop2: detected capacity change from 0 to 32768 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./14/binderfs") = 0 [pid 5244] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6564] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6564] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] exit_group(0 [pid 6564] <... futex resumed>) = ? [pid 6562] <... exit_group resumed>) = ? [pid 6584] close(4 [pid 6564] +++ exited with 0 +++ [pid 6562] +++ exited with 0 +++ [pid 6584] <... close resumed>) = 0 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6562, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 6584] mkdir("./file0", 0777) = 0 [pid 6584] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5240] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 148.446189][ T6584] BTRFS: device /dev/loop2 (7:2) using temp-fsid c75de5a5-2d8c-4e01-a107-8b528a27873d [ 148.468589][ T6584] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6584) [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./14/binderfs") = 0 [ 148.490141][ T5244] BTRFS info (device loop4): last unmount of filesystem 54bb1877-bcc8-4e75-b41c-a6efbb34f547 [pid 5240] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./14/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./14") = 0 [pid 5241] mkdir("./15", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6637 attached [pid 6637] set_robust_list(0x55558b77b760, 24 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6637 [ 148.553514][ T5240] BTRFS info (device loop0): last unmount of filesystem b517bd63-40e6-4e5a-84dd-72b81238c9c6 [ 148.584440][ T6584] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6637] <... set_robust_list resumed>) = 0 [pid 6637] chdir("./15") = 0 [pid 6637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6637] setpgid(0, 0) = 0 [pid 6637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... umount2 resumed>) = 0 [pid 6637] <... openat resumed>) = 3 [pid 6637] write(3, "1000", 4) = 4 [pid 6637] close(3) = 0 [pid 6637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6637] write(1, "executing program\n", 18 [ 148.633864][ T6584] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 148.648837][ T6584] BTRFS info (device loop2): using free-space-tree [pid 5244] newfstatat(AT_FDCWD, "./14/file0", executing program {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6637] <... write resumed>) = 18 [pid 6637] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6637] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5244] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6637] <... mprotect resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6637] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] <... openat resumed>) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6637] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] getdents64(4, [pid 6637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6641 attached [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6637] <... clone3 resumed> => {parent_tid=[6641]}, 88) = 6641 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6637] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] close(4 [pid 6641] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6637] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... rseq resumed>) = 0 [pid 6637] <... futex resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 5244] rmdir("./14/file0" [pid 6641] set_robust_list(0x7f511f03f9a0, 24 [pid 6637] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5244] <... rmdir resumed>) = 0 [pid 6641] <... set_robust_list resumed>) = 0 [pid 5244] getdents64(3, [pid 6641] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] close(3 [pid 6641] memfd_create("syzkaller", 0 [pid 5244] <... close resumed>) = 0 [pid 6641] <... memfd_create resumed>) = 3 [pid 5244] rmdir("./14" [pid 6641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5244] <... rmdir resumed>) = 0 [pid 5244] mkdir("./15", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = 0 [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6652 attached , child_tidptr=0x55558b77b750) = 6652 [pid 6652] set_robust_list(0x55558b77b760, 24) = 0 [pid 6652] chdir("./15") = 0 [pid 6652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6652] setpgid(0, 0) = 0 [pid 6652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6652] write(3, "1000", 4) = 4 [pid 6652] close(3) = 0 [pid 6652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6652] write(1, "executing program\n", 18) = 18 [pid 6652] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6652] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6652] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6584] <... mount resumed>) = 0 [pid 6584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6652] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6584] chdir("./file0" [pid 6652] <... clone3 resumed> => {parent_tid=[6656]}, 88) = 6656 [pid 6584] <... chdir resumed>) = 0 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], [pid 6584] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] <... openat resumed>) = 4 [pid 6584] ioctl(4, LOOP_CLR_FD) = 0 [pid 6652] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] close(4 [pid 6652] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6656 attached [pid 6652] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6656] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6656] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6656] memfd_create("syzkaller", 0) = 3 [pid 6656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6584] <... close resumed>) = 0 [pid 6584] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6583] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6583] <... futex resumed>) = 0 [pid 6584] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6583] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6583] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6583] <... futex resumed>) = 0 [pid 6584] <... fallocate resumed>) = 0 [pid 6583] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6583] <... futex resumed>) = 0 [pid 6584] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] exit_group(0) = ? [pid 6584] <... futex resumed>) = ? [pid 6584] +++ exited with 0 +++ [pid 6583] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6583, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5242] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./15/binderfs") = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 5242] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./14/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./14") = 0 [pid 5240] mkdir("./15", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6658 ./strace-static-x86_64: Process 6658 attached [pid 6658] set_robust_list(0x55558b77b760, 24) = 0 [pid 6658] chdir("./15") = 0 [pid 6658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6658] setpgid(0, 0) = 0 [pid 6658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6658] write(3, "1000", 4) = 4 executing program [pid 6658] close(3) = 0 [pid 6658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6658] write(1, "executing program\n", 18) = 18 [pid 6658] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6658] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6658] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6659]}, 88) = 6659 [pid 6658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6658] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6659 attached [pid 6658] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6659] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6659] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6659] memfd_create("syzkaller", 0) = 3 [pid 6659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 149.128360][ T5242] BTRFS info (device loop2): last unmount of filesystem c75de5a5-2d8c-4e01-a107-8b528a27873d [pid 6596] <... write resumed>) = 16777216 [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6596] munmap(0x7f5116c00000, 138412032 [pid 5242] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6596] <... munmap resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6596] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6596] <... openat resumed>) = 4 [pid 5242] getdents64(4, [pid 6596] ioctl(4, LOOP_SET_FD, 3 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./15/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6596] <... ioctl resumed>) = 0 [pid 5242] close(3) = 0 [pid 6596] close(3) = 0 [pid 5242] rmdir("./15") = 0 [pid 6596] close(4) = 0 [pid 6596] mkdir("./file0", 0777 [pid 5242] mkdir("./16", 0777 [pid 6596] <... mkdir resumed>) = 0 [pid 6596] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5242] <... mkdir resumed>) = 0 [ 149.341678][ T6596] loop3: detected capacity change from 0 to 32768 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [ 149.394216][ T6596] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6596) [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 6660 attached [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6660 [pid 6660] set_robust_list(0x55558b77b760, 24) = 0 [pid 6660] chdir("./16") = 0 [pid 6660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6660] setpgid(0, 0) = 0 [pid 6660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6660] write(3, "1000", 4) = 4 [pid 6660] close(3) = 0 [pid 6660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6660] write(1, "executing program\n", 18executing program ) = 18 [ 149.492927][ T6596] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 149.522668][ T6596] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 6660] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6660] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6660] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6660] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6669 attached => {parent_tid=[6669]}, 88) = 6669 [ 149.552672][ T6596] BTRFS info (device loop3): using free-space-tree [pid 6660] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6669] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] rt_sigprocmask(SIG_SETMASK, [], [pid 6660] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] <... futex resumed>) = 0 [pid 6669] memfd_create("syzkaller", 0 [pid 6660] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6669] <... memfd_create resumed>) = 3 [pid 6669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6596] <... mount resumed>) = 0 [pid 6596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6596] chdir("./file0") = 0 [pid 6596] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6596] ioctl(4, LOOP_CLR_FD) = 0 [pid 6596] close(4) = 0 [pid 6596] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6596] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] <... futex resumed>) = 0 [pid 6585] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] <... futex resumed>) = 0 [pid 6596] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6596] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6596] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] <... write resumed>) = 16777216 [pid 6596] <... futex resumed>) = 0 [pid 6656] munmap(0x7f5116c00000, 138412032 [pid 6641] <... write resumed>) = 16777216 [pid 6596] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6641] munmap(0x7f5116c00000, 138412032 [pid 6596] <... fallocate resumed>) = 0 [pid 6641] <... munmap resumed>) = 0 [pid 6596] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] <... munmap resumed>) = 0 [pid 6656] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6656] ioctl(4, LOOP_SET_FD, 3 [pid 6641] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6596] <... futex resumed>) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6641] <... openat resumed>) = 4 [pid 6596] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] exit_group(0 [pid 6641] ioctl(4, LOOP_SET_FD, 3 [pid 6596] <... futex resumed>) = ? [pid 6585] <... exit_group resumed>) = ? [pid 6596] +++ exited with 0 +++ [pid 6585] +++ exited with 0 +++ [pid 6656] <... ioctl resumed>) = 0 [pid 6656] close(3) = 0 [pid 6656] close(4) = 0 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6585, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 6656] mkdir("./file0", 0777 [pid 6641] <... ioctl resumed>) = 0 [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 6656] <... mkdir resumed>) = 0 [pid 6641] close(3 [pid 6656] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6641] <... close resumed>) = 0 [pid 5243] <... restart_syscall resumed>) = 0 [pid 6641] close(4 [pid 5243] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6641] <... close resumed>) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6641] mkdir("./file0", 0777 [pid 5243] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6641] <... mkdir resumed>) = 0 [pid 5243] <... openat resumed>) = 3 [pid 6641] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./15/binderfs") = 0 [ 149.884700][ T6656] loop4: detected capacity change from 0 to 32768 [ 149.897583][ T6641] loop1: detected capacity change from 0 to 32768 [ 149.923531][ T6656] BTRFS: device /dev/loop4 (7:4) using temp-fsid 69921087-b9d3-468a-ad7f-ca50a7617166 [ 149.961297][ T6656] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6656) [ 149.983354][ T6656] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 149.995856][ T6656] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 5243] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6659] <... write resumed>) = 16777216 [pid 6659] munmap(0x7f5116c00000, 138412032) = 0 [ 149.996342][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 150.014912][ T6641] BTRFS: device /dev/loop1 (7:1) using temp-fsid cf36b54b-ca93-4225-831d-faed480040b4 [ 150.033883][ T6656] BTRFS info (device loop4): using free-space-tree [ 150.042797][ T6641] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6641) [pid 6659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6659] ioctl(4, LOOP_SET_FD, 3 [pid 6669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6659] <... ioctl resumed>) = 0 [pid 6659] close(3) = 0 [pid 6659] close(4) = 0 [pid 6659] mkdir("./file0", 0777) = 0 [ 150.107332][ T6641] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 150.125255][ T6659] loop0: detected capacity change from 0 to 32768 [pid 6659] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6656] <... mount resumed>) = 0 [pid 6656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6656] chdir("./file0") = 0 [pid 6656] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 150.163722][ T6659] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6659) [ 150.177324][ T6641] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 150.197061][ T6641] BTRFS info (device loop1): using free-space-tree [pid 6656] ioctl(4, LOOP_CLR_FD) = 0 [pid 6656] close(4) = 0 [pid 6656] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6652] <... futex resumed>) = 0 [pid 6656] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] <... futex resumed>) = 0 [pid 6656] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6652] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6656] <... futex resumed>) = 0 [pid 6652] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6652] <... futex resumed>) = 0 [pid 6656] <... fallocate resumed>) = 0 [pid 6652] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6652] <... futex resumed>) = 0 [pid 6656] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] exit_group(0) = ? [pid 6656] <... futex resumed>) = ? [pid 6656] +++ exited with 0 +++ [pid 6652] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6652, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=31 /* 0.31 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./15/binderfs") = 0 [ 150.273866][ T6659] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 150.329340][ T6659] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 5244] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6669] <... write resumed>) = 16777216 [pid 6669] munmap(0x7f5116c00000, 138412032) = 0 [pid 6641] <... mount resumed>) = 0 [pid 6669] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6669] <... openat resumed>) = 4 [pid 6641] <... openat resumed>) = 3 [pid 6669] ioctl(4, LOOP_SET_FD, 3 [pid 6641] chdir("./file0") = 0 [pid 6641] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6641] ioctl(4, LOOP_CLR_FD) = 0 [pid 6641] close(4) = 0 [pid 6641] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6637] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 150.390302][ T6659] BTRFS info (device loop0): using free-space-tree [ 150.393826][ T5244] BTRFS info (device loop4): last unmount of filesystem 69921087-b9d3-468a-ad7f-ca50a7617166 [pid 6637] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6641] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6637] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6641] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6641] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... futex resumed>) = 0 [pid 6637] exit_group(0) = ? [pid 6641] <... futex resumed>) = ? [pid 6641] +++ exited with 0 +++ [pid 6637] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6637, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./15/binderfs") = 0 [pid 5241] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6669] <... ioctl resumed>) = 0 [pid 6669] close(3) = 0 [pid 6669] close(4) = 0 [pid 6669] mkdir("./file0", 0777) = 0 [ 150.447968][ T6669] loop2: detected capacity change from 0 to 32768 [ 150.492529][ T6669] BTRFS: device /dev/loop2 (7:2) using temp-fsid 997c06a9-0843-49f3-8cb1-97464bb4c333 [ 150.523800][ T6669] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6669) [pid 6669] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... umount2 resumed>) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6659] <... mount resumed>) = 0 [pid 6659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6659] <... openat resumed>) = 3 [pid 6659] chdir("./file0") = 0 [pid 5244] newfstatat(AT_FDCWD, "./15/file0", [pid 6659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6659] ioctl(4, LOOP_CLR_FD) = 0 [pid 6659] close(4) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6659] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6659] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6658] <... futex resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6658] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... futex resumed>) = 0 [pid 6658] <... futex resumed>) = 1 [pid 5244] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5243] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6659] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6658] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... openat resumed>) = 4 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6659] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] newfstatat(4, "", [pid 5243] newfstatat(AT_FDCWD, "./15/file0", [pid 6659] <... futex resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6659] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6658] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6658] <... futex resumed>) = 0 [pid 5244] getdents64(4, [pid 5243] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6659] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6658] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6659] <... fallocate resumed>) = 0 [pid 5244] getdents64(4, [pid 5243] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6659] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6658] <... futex resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] <... openat resumed>) = 4 [pid 6659] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6658] exit_group(0 [pid 5244] close(4 [ 150.554590][ T5241] BTRFS info (device loop1): last unmount of filesystem cf36b54b-ca93-4225-831d-faed480040b4 [ 150.581388][ T6669] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... close resumed>) = 0 [pid 5244] rmdir("./15/file0" [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6659] <... futex resumed>) = ? [pid 6658] <... exit_group resumed>) = ? [pid 5244] <... rmdir resumed>) = 0 [pid 5243] getdents64(4, [pid 6659] +++ exited with 0 +++ [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6658] +++ exited with 0 +++ [pid 5244] getdents64(3, [pid 5243] close(4 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] <... close resumed>) = 0 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6658, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5244] close(3 [pid 5243] rmdir("./15/file0" [pid 5244] <... close resumed>) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 5244] rmdir("./15" [pid 5243] getdents64(3, [pid 5240] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... rmdir resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] mkdir("./16", 0777 [pid 5243] close(3 [pid 5240] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... mkdir resumed>) = 0 [pid 5243] <... close resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] rmdir("./15" [pid 5240] getdents64(3, [pid 5243] <... rmdir resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] mkdir("./16", 0777 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... mkdir resumed>) = 0 [pid 5240] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5240] unlink("./15/binderfs" [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] <... openat resumed>) = 3 [pid 5240] <... unlink resumed>) = 0 [pid 5243] ioctl(3, LOOP_CLR_FD [pid 5240] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... openat resumed>) = 3 [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [ 150.626431][ T6669] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 150.657645][ T6669] BTRFS info (device loop2): using free-space-tree [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 6729 ./strace-static-x86_64: Process 6729 attached [pid 5244] close(3) = 0 [pid 6729] set_robust_list(0x55558b77b760, 24) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6729] chdir("./16"./strace-static-x86_64: Process 6732 attached ) = 0 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6732 [pid 6729] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6732] set_robust_list(0x55558b77b760, 24 [pid 6729] <... prctl resumed>) = 0 [pid 6732] <... set_robust_list resumed>) = 0 [pid 6729] setpgid(0, 0 [pid 6732] chdir("./16" [pid 6729] <... setpgid resumed>) = 0 [pid 6732] <... chdir resumed>) = 0 [pid 6729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6729] write(3, "1000", 4) = 4 [pid 6729] close(3 [pid 6732] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6729] <... close resumed>) = 0 executing program [pid 6732] <... prctl resumed>) = 0 [pid 6729] symlink("/dev/binderfs", "./binderfs" [pid 6732] setpgid(0, 0 [pid 6729] <... symlink resumed>) = 0 [pid 6732] <... setpgid resumed>) = 0 [pid 6729] write(1, "executing program\n", 18 [pid 6732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6729] <... write resumed>) = 18 [pid 6729] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6729] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6732] <... openat resumed>) = 3 [pid 6729] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6732] write(3, "1000", 4 [pid 6729] <... mmap resumed>) = 0x7f511f01f000 [pid 6732] <... write resumed>) = 4 [pid 6729] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6732] close(3 [pid 6729] <... mprotect resumed>) = 0 [pid 6732] <... close resumed>) = 0 [pid 6729] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6732] symlink("/dev/binderfs", "./binderfs" [pid 6729] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6732] <... symlink resumed>) = 0 executing program [pid 6729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6732] write(1, "executing program\n", 18./strace-static-x86_64: Process 6733 attached ) = 18 [pid 6733] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6732] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... clone3 resumed> => {parent_tid=[6733]}, 88) = 6733 [pid 6732] <... futex resumed>) = 0 [pid 6729] rt_sigprocmask(SIG_SETMASK, [], [pid 6733] <... rseq resumed>) = 0 [pid 6732] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6733] set_robust_list(0x7f511f03f9a0, 24 [pid 6732] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6729] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] <... set_robust_list resumed>) = 0 [pid 6732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6729] <... futex resumed>) = 0 [pid 6733] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6729] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6732] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6733] memfd_create("syzkaller", 0 [pid 6732] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6733] <... memfd_create resumed>) = 3 [pid 6732] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6735 attached [pid 6733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6735] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6732] <... clone3 resumed> => {parent_tid=[6735]}, 88) = 6735 [pid 6735] <... rseq resumed>) = 0 [pid 6733] <... mmap resumed>) = 0x7f5116c00000 [pid 6732] rt_sigprocmask(SIG_SETMASK, [], [pid 6735] set_robust_list(0x7f511f03f9a0, 24 [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] <... set_robust_list resumed>) = 0 [pid 6732] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] <... futex resumed>) = 0 [pid 6735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6735] memfd_create("syzkaller", 0) = 3 [pid 6735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 150.746116][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6669] <... mount resumed>) = 0 [pid 6669] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6669] chdir("./file0") = 0 [pid 6669] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6669] ioctl(4, LOOP_CLR_FD) = 0 [pid 6669] close(4) = 0 [pid 6669] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] <... futex resumed>) = 0 [pid 6669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6660] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6660] <... futex resumed>) = 0 [pid 6660] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6669] <... openat resumed>) = 4 [pid 6669] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6660] <... futex resumed>) = 0 [pid 6669] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] <... futex resumed>) = 0 [pid 6660] <... futex resumed>) = 1 [pid 6669] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6660] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6669] <... fallocate resumed>) = 0 [pid 6669] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... umount2 resumed>) = 0 [pid 6669] <... futex resumed>) = 1 [pid 6660] <... futex resumed>) = 0 [pid 5241] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6660] exit_group(0) = ? [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6669] +++ exited with 0 +++ [pid 6660] +++ exited with 0 +++ [pid 5241] newfstatat(AT_FDCWD, "./15/file0", [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6660, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=24 /* 0.24 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./16/binderfs") = 0 [pid 5241] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./15/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./15") = 0 [pid 5241] mkdir("./16", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [ 151.103560][ T5242] BTRFS info (device loop2): last unmount of filesystem 997c06a9-0843-49f3-8cb1-97464bb4c333 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6747 attached , child_tidptr=0x55558b77b750) = 6747 [pid 6747] set_robust_list(0x55558b77b760, 24) = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 6747] chdir("./16" [pid 5240] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6747] <... chdir resumed>) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, [pid 6747] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./15/file0") = 0 [pid 6747] <... prctl resumed>) = 0 [pid 5240] getdents64(3, [pid 6747] setpgid(0, 0 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6747] <... setpgid resumed>) = 0 [pid 6747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] close(3) = 0 [pid 5240] rmdir("./15" [pid 5242] <... umount2 resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./16", 0777 [pid 6747] <... openat resumed>) = 3 [pid 5242] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6747] write(3, "1000", 4 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6747] <... write resumed>) = 4 [pid 5242] newfstatat(AT_FDCWD, "./16/file0", [pid 6747] close(3) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6747] symlink("/dev/binderfs", "./binderfs" [pid 5242] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... openat resumed>) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6748 attached [pid 6747] <... symlink resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6747] write(1, "executing program\n", 18 [pid 5242] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6748] set_robust_list(0x55558b77b760, 24 [pid 6747] <... write resumed>) = 18 [pid 5242] <... openat resumed>) = 4 [pid 6748] <... set_robust_list resumed>) = 0 [pid 6747] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] chdir("./16" [pid 6747] <... futex resumed>) = 0 [pid 5242] newfstatat(4, "", [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 6748 [pid 6748] <... chdir resumed>) = 0 [pid 6747] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6747] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] getdents64(4, [pid 6748] <... prctl resumed>) = 0 [pid 6747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6748] setpgid(0, 0 [pid 6747] <... mmap resumed>) = 0x7f511f01f000 [pid 6748] <... setpgid resumed>) = 0 [pid 6747] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5242] getdents64(4, [pid 6747] <... mprotect resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6747] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] close(4 [pid 6748] write(3, "1000", 4 [pid 5242] <... close resumed>) = 0 [pid 6748] <... write resumed>) = 4 [pid 5242] rmdir("./16/file0" [pid 6748] close(3 [pid 6733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] <... rmdir resumed>) = 0 [pid 6748] <... close resumed>) = 0 [pid 6747] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6748] symlink("/dev/binderfs", "./binderfs" [pid 5242] getdents64(3, [pid 6748] <... symlink resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6749 attached [pid 6748] write(1, "executing program\n", 18 [pid 6747] <... clone3 resumed> => {parent_tid=[6749]}, 88) = 6749 executing program [pid 6749] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6748] <... write resumed>) = 18 [pid 6747] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] close(3 [pid 6748] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... rseq resumed>) = 0 [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... close resumed>) = 0 [pid 6749] set_robust_list(0x7f511f03f9a0, 24 [pid 6748] <... futex resumed>) = 0 [pid 6747] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] rmdir("./16" [pid 6749] <... set_robust_list resumed>) = 0 [pid 6748] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6747] <... futex resumed>) = 0 [pid 6749] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... rmdir resumed>) = 0 [pid 6749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6748] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6747] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] mkdir("./17", 0777 [pid 6749] memfd_create("syzkaller", 0 [pid 6748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] <... mkdir resumed>) = 0 [pid 6749] <... memfd_create resumed>) = 3 [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6749] <... mmap resumed>) = 0x7f5116c00000 [pid 5242] <... openat resumed>) = 3 [pid 6748] <... mmap resumed>) = 0x7f511f01f000 [pid 6748] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5242] ioctl(3, LOOP_CLR_FD [pid 6748] <... mprotect resumed>) = 0 [pid 5242] <... ioctl resumed>) = 0 [pid 6748] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] close(3) = 0 [pid 6748] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6751 attached ./strace-static-x86_64: Process 6750 attached [pid 6750] set_robust_list(0x55558b77b760, 24) = 0 [pid 6748] <... clone3 resumed> => {parent_tid=[6751]}, 88) = 6751 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 6750 [pid 6750] chdir("./17") = 0 [pid 6750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6750] setpgid(0, 0) = 0 [pid 6750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6750] write(3, "1000", 4) = 4 [pid 6750] close(3) = 0 [pid 6750] symlink("/dev/binderfs", "./binderfs" [pid 6751] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6750] <... symlink resumed>) = 0 [pid 6748] rt_sigprocmask(SIG_SETMASK, [], [pid 6751] <... rseq resumed>) = 0 [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6751] set_robust_list(0x7f511f03f9a0, 24 [pid 6748] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6751] <... set_robust_list resumed>) = 0 [pid 6750] write(1, "executing program\n", 18 [pid 6748] <... futex resumed>) = 0 [pid 6751] rt_sigprocmask(SIG_SETMASK, [], executing program NULL, 8) = 0 [pid 6750] <... write resumed>) = 18 [pid 6748] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6750] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6750] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6750] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6752 attached [pid 6751] memfd_create("syzkaller", 0 [pid 6750] <... clone3 resumed> => {parent_tid=[6752]}, 88) = 6752 [pid 6751] <... memfd_create resumed>) = 3 [pid 6751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6752] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6751] <... mmap resumed>) = 0x7f5116c00000 [pid 6750] rt_sigprocmask(SIG_SETMASK, [], [pid 6752] <... rseq resumed>) = 0 [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] set_robust_list(0x7f511f03f9a0, 24 [pid 6750] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... set_robust_list resumed>) = 0 [pid 6750] <... futex resumed>) = 0 [pid 6752] rt_sigprocmask(SIG_SETMASK, [], [pid 6750] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] memfd_create("syzkaller", 0) = 3 [pid 6752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6735] <... write resumed>) = 16777216 [pid 6735] munmap(0x7f5116c00000, 138412032) = 0 [pid 6735] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6735] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6735] close(3) = 0 [pid 6735] close(4) = 0 [pid 6735] mkdir("./file0", 0777) = 0 [ 151.525929][ T6735] loop4: detected capacity change from 0 to 32768 [ 151.562834][ T6735] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6735) [ 151.625420][ T6735] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6735] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6733] <... write resumed>) = 16777216 [pid 6733] munmap(0x7f5116c00000, 138412032) = 0 [ 151.672214][ T6735] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 151.703026][ T6735] BTRFS info (device loop4): using free-space-tree [pid 6733] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6733] close(3) = 0 [pid 6733] close(4) = 0 [pid 6733] mkdir("./file0", 0777) = 0 [ 151.773402][ T6733] loop3: detected capacity change from 0 to 32768 [pid 6733] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 151.819183][ T6733] BTRFS: device /dev/loop3 (7:3) using temp-fsid 26b0fe2c-182e-49bf-ace3-22f0c4742b7f [ 151.862690][ T6733] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6733) [ 151.944204][ T6733] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6735] <... mount resumed>) = 0 [pid 6735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6735] chdir("./file0") = 0 [pid 6735] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6735] ioctl(4, LOOP_CLR_FD) = 0 [pid 6735] close(4) = 0 [pid 6735] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6735] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6732] <... futex resumed>) = 0 [pid 6732] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] <... futex resumed>) = 0 [pid 6732] <... futex resumed>) = 1 [pid 6735] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6732] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] <... openat resumed>) = 4 [pid 6735] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6732] <... futex resumed>) = 0 [pid 6732] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6732] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6735] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6732] <... futex resumed>) = 0 [pid 6735] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6732] exit_group(0) = ? [pid 6735] <... futex resumed>) = ? [pid 6735] +++ exited with 0 +++ [pid 6732] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6732, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [ 152.002749][ T6733] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 152.011443][ T6733] BTRFS info (device loop3): using free-space-tree [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./16/binderfs") = 0 [pid 5244] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6752] <... write resumed>) = 16777216 [ 152.111425][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6752] munmap(0x7f5116c00000, 138412032) = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6752] ioctl(4, LOOP_SET_FD, 3 [pid 6751] <... write resumed>) = 16777216 [pid 6733] <... mount resumed>) = 0 [pid 6752] <... ioctl resumed>) = 0 [pid 6751] munmap(0x7f5116c00000, 138412032 [pid 6733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6752] close(3) = 0 [pid 6733] <... openat resumed>) = 3 [pid 6752] close(4 [pid 6733] chdir("./file0" [pid 6752] <... close resumed>) = 0 [pid 6749] <... write resumed>) = 16777216 [pid 6733] <... chdir resumed>) = 0 [pid 6752] mkdir("./file0", 0777 [pid 6749] munmap(0x7f5116c00000, 138412032 [pid 6733] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6752] <... mkdir resumed>) = 0 [pid 6733] <... openat resumed>) = 4 [pid 6733] ioctl(4, LOOP_CLR_FD) = 0 [ 152.227693][ T6752] loop2: detected capacity change from 0 to 32768 [pid 6752] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6751] <... munmap resumed>) = 0 [pid 6733] close(4 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6733] <... close resumed>) = 0 [pid 5244] newfstatat(AT_FDCWD, "./16/file0", [pid 6733] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6733] <... futex resumed>) = 1 [pid 6749] <... munmap resumed>) = 0 [pid 6733] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6729] <... futex resumed>) = 0 [pid 5244] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6729] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6751] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6733] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6729] <... futex resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6751] <... openat resumed>) = 4 [pid 6751] ioctl(4, LOOP_SET_FD, 3 [pid 6733] <... openat resumed>) = 4 [pid 5244] <... openat resumed>) = 4 [pid 5244] newfstatat(4, "", [pid 6729] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, [pid 6749] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6733] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6749] <... openat resumed>) = 4 [pid 5244] getdents64(4, [pid 6749] ioctl(4, LOOP_SET_FD, 3 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6733] <... futex resumed>) = 1 [pid 6729] <... futex resumed>) = 0 [pid 5244] close(4 [pid 6729] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... close resumed>) = 0 [pid 6729] <... futex resumed>) = 0 [pid 5244] rmdir("./16/file0" [pid 6733] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6729] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... rmdir resumed>) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 6733] <... fallocate resumed>) = 0 [pid 6733] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] rmdir("./16") = 0 [pid 5244] mkdir("./17", 0777 [pid 6733] <... futex resumed>) = 1 [pid 6729] <... futex resumed>) = 0 [pid 5244] <... mkdir resumed>) = 0 [pid 6729] exit_group(0) = ? [pid 6751] <... ioctl resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6751] close(3 [pid 5244] <... openat resumed>) = 3 [pid 6751] <... close resumed>) = 0 [pid 6733] +++ exited with 0 +++ [pid 6729] +++ exited with 0 +++ [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6729, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...> [pid 6751] close(4 [pid 5244] <... ioctl resumed>) = 0 [pid 6751] <... close resumed>) = 0 [pid 5244] close(3 [pid 6751] mkdir("./file0", 0777 [pid 5244] <... close resumed>) = 0 [pid 6751] <... mkdir resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6786 attached [pid 6751] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... restart_syscall resumed>) = 0 [ 152.302400][ T6752] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6752) [ 152.324361][ T6751] loop0: detected capacity change from 0 to 32768 [ 152.342209][ T6749] loop1: detected capacity change from 0 to 32768 [pid 5243] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6786] set_robust_list(0x55558b77b760, 24 [pid 6749] <... ioctl resumed>) = 0 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6786 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6786] <... set_robust_list resumed>) = 0 [pid 6749] close(3 [pid 5243] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6786] chdir("./17" [pid 6749] <... close resumed>) = 0 [pid 5243] <... openat resumed>) = 3 [pid 6786] <... chdir resumed>) = 0 [pid 6749] close(4 [pid 6786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6749] <... close resumed>) = 0 [pid 5243] newfstatat(3, "", [pid 6786] setpgid(0, 0 [pid 6749] mkdir("./file0", 0777 [pid 6786] <... setpgid resumed>) = 0 [pid 6749] <... mkdir resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6749] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] unlink("./16/binderfs" [pid 6786] <... openat resumed>) = 3 [pid 5243] <... unlink resumed>) = 0 [pid 6786] write(3, "1000", 4 [pid 5243] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6786] <... write resumed>) = 4 [ 152.382943][ T6751] BTRFS: device /dev/loop0 (7:0) using temp-fsid 64e084cf-d366-487c-a017-0931bb83cc71 [ 152.407527][ T6752] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6786] close(3) = 0 [pid 6786] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6786] write(1, "executing program\n", 18) = 18 [pid 6786] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6786] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6786] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 152.435830][ T6751] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6751) [ 152.444758][ T5243] BTRFS info (device loop3): last unmount of filesystem 26b0fe2c-182e-49bf-ace3-22f0c4742b7f [ 152.459590][ T6752] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 6786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6788 attached => {parent_tid=[6788]}, 88) = 6788 [pid 6788] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6786] rt_sigprocmask(SIG_SETMASK, [], [pid 6788] set_robust_list(0x7f511f03f9a0, 24 [pid 6786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6788] <... set_robust_list resumed>) = 0 [pid 6786] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] rt_sigprocmask(SIG_SETMASK, [], [pid 6786] <... futex resumed>) = 0 [pid 6788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6786] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6788] memfd_create("syzkaller", 0) = 3 [pid 6788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 152.488309][ T6752] BTRFS info (device loop2): using free-space-tree [ 152.499820][ T6749] BTRFS: device /dev/loop1 (7:1) using temp-fsid 07598c30-a006-48e1-bc52-7c8f9792040a [ 152.511167][ T6749] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6749) [ 152.534806][ T6751] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 152.572690][ T6751] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 152.624642][ T6749] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 152.648919][ T6751] BTRFS info (device loop0): using free-space-tree [ 152.707023][ T6749] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 6752] <... mount resumed>) = 0 [pid 6752] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 152.774690][ T6749] BTRFS info (device loop1): using free-space-tree [pid 6752] chdir("./file0") = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6752] ioctl(4, LOOP_CLR_FD) = 0 [pid 6752] close(4) = 0 [pid 6752] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6752] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6750] <... futex resumed>) = 0 [pid 6750] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = 0 [pid 6750] <... futex resumed>) = 1 [pid 6752] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6750] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... openat resumed>) = 4 [pid 6752] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6750] <... futex resumed>) = 0 [pid 6752] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6750] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6750] <... futex resumed>) = 0 [pid 6752] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6750] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... fallocate resumed>) = 0 [pid 6752] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6750] <... futex resumed>) = 0 [pid 6750] exit_group(0) = ? [pid 6752] +++ exited with 0 +++ [pid 6750] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6750, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 5242] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./17/binderfs") = 0 [pid 5242] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6751] <... mount resumed>) = 0 [pid 5243] <... openat resumed>) = 4 [pid 6751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5243] newfstatat(4, "", [pid 6751] <... openat resumed>) = 3 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6751] chdir("./file0" [pid 5243] getdents64(4, [pid 6751] <... chdir resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6751] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5243] getdents64(4, [pid 6751] <... openat resumed>) = 4 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6751] ioctl(4, LOOP_CLR_FD [pid 5243] close(4 [pid 6751] <... ioctl resumed>) = 0 [pid 5243] <... close resumed>) = 0 [pid 6751] close(4 [pid 5243] rmdir("./16/file0" [pid 6751] <... close resumed>) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 6751] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 6751] <... futex resumed>) = 1 [pid 6748] <... futex resumed>) = 0 [pid 5243] rmdir("./16" [pid 6751] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6748] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... rmdir resumed>) = 0 [pid 6748] <... futex resumed>) = 0 [pid 6748] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] mkdir("./17", 0777 [pid 6751] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5243] <... mkdir resumed>) = 0 [pid 6751] <... openat resumed>) = 4 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [ 152.929020][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6834 attached [pid 6751] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] set_robust_list(0x55558b77b760, 24) = 0 [pid 6751] <... futex resumed>) = 1 [pid 6748] <... futex resumed>) = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 6834 [pid 6748] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6748] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6834] chdir("./17") = 0 [pid 6751] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6751] <... fallocate resumed>) = 0 [pid 6834] <... prctl resumed>) = 0 [pid 6834] setpgid(0, 0) = 0 [pid 6751] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] <... futex resumed>) = 0 [pid 6748] exit_group(0) = ? [pid 6834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6751] <... futex resumed>) = ? [pid 6834] <... openat resumed>) = 3 [pid 6834] write(3, "1000", 4 [pid 6751] +++ exited with 0 +++ [pid 6748] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6748, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5240] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./16/binderfs") = 0 [pid 5240] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6834] <... write resumed>) = 4 [pid 6834] close(3 [pid 6749] <... mount resumed>) = 0 [pid 6834] <... close resumed>) = 0 [pid 6749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6834] symlink("/dev/binderfs", "./binderfs" [pid 6749] chdir("./file0" [pid 6834] <... symlink resumed>) = 0 [pid 6749] <... chdir resumed>) = 0 [pid 6834] write(1, "executing program\n", 18 [pid 6749] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program [pid 6834] <... write resumed>) = 18 [pid 6749] <... openat resumed>) = 4 [pid 6834] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] ioctl(4, LOOP_CLR_FD [pid 6834] <... futex resumed>) = 0 [pid 6749] <... ioctl resumed>) = 0 [pid 6834] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6749] close(4 [pid 6834] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6749] <... close resumed>) = 0 [pid 6834] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6749] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6749] <... futex resumed>) = 1 [pid 6747] <... futex resumed>) = 0 [pid 6834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6749] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6747] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] <... mmap resumed>) = 0x7f511f01f000 [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6747] <... futex resumed>) = 0 [pid 6747] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6834] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6749] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6834] <... mprotect resumed>) = 0 [pid 6749] <... openat resumed>) = 4 [pid 6834] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6749] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6749] <... futex resumed>) = 1 [pid 6747] <... futex resumed>) = 0 [pid 6834] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6749] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6747] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6747] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6749] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6749] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6838 attached ) = 1 [pid 6749] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6834] <... clone3 resumed> => {parent_tid=[6838]}, 88) = 6838 [pid 6834] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6834] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6834] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6747] <... futex resumed>) = 0 [pid 6747] exit_group(0 [pid 6838] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6747] <... exit_group resumed>) = ? [pid 6838] <... rseq resumed>) = 0 [pid 6749] <... futex resumed>) = ? [pid 6749] +++ exited with 0 +++ [pid 6747] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6747, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 6838] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6838] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] <... restart_syscall resumed>) = 0 [pid 6838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6838] memfd_create("syzkaller", 0 [pid 5241] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6838] <... memfd_create resumed>) = 3 [pid 6838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5241] getdents64(3, [pid 6838] <... mmap resumed>) = 0x7f5116c00000 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./16/binderfs") = 0 [ 153.097982][ T5240] BTRFS info (device loop0): last unmount of filesystem 64e084cf-d366-487c-a017-0931bb83cc71 [pid 5241] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./16/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./16") = 0 [pid 5240] mkdir("./17", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6840 ./strace-static-x86_64: Process 6840 attached [pid 6840] set_robust_list(0x55558b77b760, 24) = 0 [pid 6840] chdir("./17") = 0 [pid 6840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 153.193698][ T5241] BTRFS info (device loop1): last unmount of filesystem 07598c30-a006-48e1-bc52-7c8f9792040a executing program [pid 6840] setpgid(0, 0) = 0 [pid 6840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6840] write(3, "1000", 4) = 4 [pid 6840] close(3) = 0 [pid 6840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6840] write(1, "executing program\n", 18) = 18 [pid 6840] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6840] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6841]}, 88) = 6841 [pid 6840] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6841 attached NULL, 8) = 0 [pid 6840] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6841] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6841] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6841] memfd_create("syzkaller", 0) = 3 [pid 6788] <... write resumed>) = 16777216 [pid 6841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6788] munmap(0x7f5116c00000, 138412032) = 0 [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6788] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6788] ioctl(4, LOOP_SET_FD, 3 [pid 5242] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6788] <... ioctl resumed>) = 0 [pid 5242] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", [pid 5241] <... umount2 resumed>) = 0 [pid 6788] close(3 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6788] <... close resumed>) = 0 [pid 5242] getdents64(4, [pid 6788] close(4) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6788] mkdir("./file0", 0777 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5241] newfstatat(AT_FDCWD, "./16/file0", [pid 5242] rmdir("./17/file0" [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6788] <... mkdir resumed>) = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 5241] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6788] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5242] getdents64(3, [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] close(3) = 0 [pid 5241] <... openat resumed>) = 4 [pid 5242] rmdir("./17" [pid 5241] newfstatat(4, "", [pid 5242] <... rmdir resumed>) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 153.344376][ T6788] loop4: detected capacity change from 0 to 32768 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./16/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] mkdir("./18", 0777) = 0 [pid 5241] close(3 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5241] <... close resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5241] rmdir("./16" [pid 5242] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5241] <... rmdir resumed>) = 0 [pid 5242] close(3) = 0 [pid 5241] mkdir("./17", 0777 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6842 attached , child_tidptr=0x55558b77b750) = 6842 [pid 6842] set_robust_list(0x55558b77b760, 24) = 0 [pid 6842] chdir("./18" [pid 5241] <... mkdir resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6842] <... chdir resumed>) = 0 [pid 6842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 153.386384][ T6788] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6788) [pid 6842] setpgid(0, 0 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6843 [pid 6842] <... setpgid resumed>) = 0 [pid 6842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6842] write(3, "1000", 4./strace-static-x86_64: Process 6843 attached [pid 6843] set_robust_list(0x55558b77b760, 24) = 0 [pid 6842] <... write resumed>) = 4 [pid 6843] chdir("./17" [pid 6842] close(3) = 0 [pid 6843] <... chdir resumed>) = 0 [pid 6843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6843] setpgid(0, 0) = 0 [pid 6843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6842] symlink("/dev/binderfs", "./binderfs" [pid 6843] write(3, "1000", 4 [pid 6842] <... symlink resumed>) = 0 [pid 6843] <... write resumed>) = 4 [pid 6843] close(3) = 0 executing program [pid 6843] symlink("/dev/binderfs", "./binderfs" [pid 6842] write(1, "executing program\n", 18 [pid 6843] <... symlink resumed>) = 0 [pid 6842] <... write resumed>) = 18 [pid 6842] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 6843] write(1, "executing program\n", 18 [pid 6842] <... futex resumed>) = 0 [pid 6842] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 6843] <... write resumed>) = 18 [pid 6843] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6843] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6842] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6843] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 6842] <... mmap resumed>) = 0x7f511f01f000 [pid 6843] <... mprotect resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6842] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6845 attached [pid 6843] <... clone3 resumed> => {parent_tid=[6845]}, 88) = 6845 [pid 6845] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6843] rt_sigprocmask(SIG_SETMASK, [], [pid 6842] <... mprotect resumed>) = 0 [pid 6843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6843] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6843] <... futex resumed>) = 0 [pid 6842] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6843] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6845] <... rseq resumed>) = 0 [pid 6845] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6845] memfd_create("syzkaller", 0) = 3 [ 153.470360][ T6788] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 ./strace-static-x86_64: Process 6846 attached [pid 6846] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6846] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6846] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6842] <... clone3 resumed> => {parent_tid=[6846]}, 88) = 6846 [pid 6842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 153.513100][ T6788] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 153.552685][ T6788] BTRFS info (device loop4): using free-space-tree [pid 6842] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... futex resumed>) = 0 [pid 6842] <... futex resumed>) = 1 [pid 6846] memfd_create("syzkaller", 0 [pid 6842] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6846] <... memfd_create resumed>) = 3 [pid 6846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6788] <... mount resumed>) = 0 [pid 6788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6788] chdir("./file0") = 0 [pid 6788] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6788] ioctl(4, LOOP_CLR_FD) = 0 [pid 6788] close(4) = 0 [pid 6788] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] <... futex resumed>) = 0 [pid 6788] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6786] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] <... futex resumed>) = 0 [pid 6786] <... futex resumed>) = 1 [pid 6788] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6788] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6788] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6786] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6786] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] <... futex resumed>) = 0 [pid 6786] <... futex resumed>) = 1 [pid 6788] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6786] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6788] <... fallocate resumed>) = 0 [pid 6788] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] <... futex resumed>) = 0 [pid 6788] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6786] exit_group(0 [pid 6788] <... futex resumed>) = ? [pid 6786] <... exit_group resumed>) = ? [pid 6788] +++ exited with 0 +++ [pid 6786] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6786, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=21 /* 0.21 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./17/binderfs") = 0 [ 154.016581][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5244] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6838] <... write resumed>) = 16777216 [pid 6845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6838] munmap(0x7f5116c00000, 138412032) = 0 [pid 6838] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5244] <... umount2 resumed>) = 0 [pid 6838] <... openat resumed>) = 4 [pid 5244] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6838] ioctl(4, LOOP_SET_FD, 3 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6838] <... ioctl resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 6838] close(3 [pid 5244] newfstatat(4, "", [pid 6838] <... close resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6838] close(4 [pid 5244] getdents64(4, [pid 6838] <... close resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] getdents64(4, [pid 6838] mkdir("./file0", 0777 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4 [pid 6838] <... mkdir resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 6838] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] rmdir("./17/file0") = 0 [ 154.128733][ T6838] loop3: detected capacity change from 0 to 32768 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./17") = 0 [pid 5244] mkdir("./18", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = 0 [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6863 attached [pid 6863] set_robust_list(0x55558b77b760, 24 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6863 [pid 6863] <... set_robust_list resumed>) = 0 [pid 6863] chdir("./18") = 0 [pid 6863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6863] setpgid(0, 0) = 0 [pid 6863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 154.173026][ T6838] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6838) [pid 6863] write(3, "1000", 4) = 4 [pid 6863] close(3) = 0 [pid 6863] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6863] write(1, "executing program\n", 18) = 18 [pid 6863] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6863] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6863] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6863] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6864]}, 88) = 6864 [pid 6863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6863] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6863] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6864 attached [ 154.249588][ T6838] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6864] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6864] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6864] memfd_create("syzkaller", 0) = 3 [pid 6864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 154.292820][ T6838] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 154.309363][ T6838] BTRFS info (device loop3): using free-space-tree [pid 6841] <... write resumed>) = 16777216 [pid 6841] munmap(0x7f5116c00000, 138412032) = 0 [pid 6841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6841] ioctl(4, LOOP_SET_FD, 3 [pid 6846] <... write resumed>) = 16777216 [pid 6845] <... write resumed>) = 16777216 [pid 6841] <... ioctl resumed>) = 0 [pid 6841] close(3) = 0 [ 154.533198][ T6841] loop0: detected capacity change from 0 to 32768 [pid 6846] munmap(0x7f5116c00000, 138412032 [pid 6841] close(4) = 0 [pid 6841] mkdir("./file0", 0777 [pid 6846] <... munmap resumed>) = 0 [pid 6845] munmap(0x7f5116c00000, 138412032 [pid 6841] <... mkdir resumed>) = 0 [pid 6838] <... mount resumed>) = 0 [pid 6846] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6846] <... openat resumed>) = 4 [pid 6846] ioctl(4, LOOP_SET_FD, 3 [pid 6845] <... munmap resumed>) = 0 [pid 6838] <... openat resumed>) = 3 [pid 6838] chdir("./file0") = 0 [pid 6838] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6841] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6838] <... openat resumed>) = 4 [pid 6838] ioctl(4, LOOP_CLR_FD [pid 6846] <... ioctl resumed>) = 0 [pid 6846] close(3) = 0 [pid 6846] close(4) = 0 [pid 6846] mkdir("./file0", 0777) = 0 [pid 6846] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6838] <... ioctl resumed>) = 0 [pid 6838] close(4) = 0 [ 154.600366][ T6846] loop2: detected capacity change from 0 to 32768 [ 154.623969][ T6841] BTRFS: device /dev/loop0 (7:0) using temp-fsid 3d4b7f83-822c-4ab7-a2a2-9c5ebd35a0cd [pid 6838] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6838] <... futex resumed>) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6845] <... openat resumed>) = 4 [pid 6834] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6845] ioctl(4, LOOP_SET_FD, 3 [pid 6834] <... futex resumed>) = 0 [pid 6838] <... openat resumed>) = 4 [pid 6834] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... ioctl resumed>) = 0 [pid 6838] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] close(3 [pid 6838] <... futex resumed>) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6845] <... close resumed>) = 0 [pid 6838] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6834] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] close(4) = 0 [pid 6834] <... futex resumed>) = 0 [pid 6845] mkdir("./file0", 0777 [pid 6838] <... fallocate resumed>) = 0 [pid 6834] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6845] <... mkdir resumed>) = 0 [pid 6845] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6838] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6838] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6834] exit_group(0 [pid 6838] <... futex resumed>) = ? [pid 6834] <... exit_group resumed>) = ? [pid 6838] +++ exited with 0 +++ [pid 6834] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6834, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=22 /* 0.22 s */} --- [pid 5243] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./17/binderfs") = 0 [ 154.652164][ T6841] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6841) [ 154.672143][ T6845] loop1: detected capacity change from 0 to 32768 [pid 5243] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 154.737526][ T6846] BTRFS: device /dev/loop2 (7:2) using temp-fsid 47715a74-ec7a-4824-a2a2-da40a1f34074 [ 154.751764][ T6841] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 154.752462][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 154.784500][ T6841] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.792754][ T6846] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6846) [ 154.812654][ T6841] BTRFS info (device loop0): using free-space-tree [ 154.840986][ T6845] BTRFS: device /dev/loop1 (7:1) using temp-fsid ff676bd2-21c2-47ca-bb44-7f765e8c1f12 [ 154.860845][ T6846] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 154.860987][ T6845] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6845) [ 154.903116][ T6846] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 154.937946][ T6845] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 154.942671][ T6846] BTRFS info (device loop2): using free-space-tree [pid 6864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6841] <... mount resumed>) = 0 [pid 6841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6841] chdir("./file0") = 0 [pid 6841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6841] ioctl(4, LOOP_CLR_FD) = 0 [pid 6841] close(4) = 0 [pid 6841] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6840] <... futex resumed>) = 0 [pid 6841] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6840] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6840] <... futex resumed>) = 0 [pid 6841] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6840] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6841] <... openat resumed>) = 4 [ 154.974442][ T6845] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 154.984272][ T6845] BTRFS info (device loop1): using free-space-tree [pid 6841] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6840] <... futex resumed>) = 0 [pid 6841] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6840] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6841] <... fallocate resumed>) = 0 [pid 6841] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6841] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6840] <... futex resumed>) = 0 [pid 6840] exit_group(0) = ? [pid 6841] <... futex resumed>) = ? [pid 6841] +++ exited with 0 +++ [pid 6840] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6840, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=36 /* 0.36 s */} --- [pid 5240] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./17/binderfs") = 0 [pid 5240] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./17/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./17") = 0 [pid 5243] mkdir("./18", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6912 attached , child_tidptr=0x55558b77b750) = 6912 [pid 6912] set_robust_list(0x55558b77b760, 24) = 0 [pid 6912] chdir("./18") = 0 [pid 6912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6912] setpgid(0, 0) = 0 [pid 6912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 155.137588][ T5240] BTRFS info (device loop0): last unmount of filesystem 3d4b7f83-822c-4ab7-a2a2-9c5ebd35a0cd [pid 6912] write(3, "1000", 4 [pid 6864] <... write resumed>) = 16777216 [pid 6912] <... write resumed>) = 4 [pid 6912] close(3) = 0 [pid 6912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6912] write(1, "executing program\n", 18executing program ) = 18 [pid 6864] munmap(0x7f5116c00000, 138412032 [pid 6912] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6912] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6912] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6912] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6912] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6920 attached => {parent_tid=[6920]}, 88) = 6920 [pid 6912] rt_sigprocmask(SIG_SETMASK, [], [pid 6920] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6920] <... rseq resumed>) = 0 [pid 6912] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6912] <... futex resumed>) = 0 [pid 6920] memfd_create("syzkaller", 0 [pid 6864] <... munmap resumed>) = 0 [pid 6912] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6920] <... memfd_create resumed>) = 3 [pid 6864] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6864] <... openat resumed>) = 4 [pid 6920] <... mmap resumed>) = 0x7f5116c00000 [pid 6864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6864] close(3) = 0 [pid 6864] close(4) = 0 [pid 6864] mkdir("./file0", 0777) = 0 [ 155.247394][ T6864] loop4: detected capacity change from 0 to 32768 [pid 6864] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6845] <... mount resumed>) = 0 [pid 6846] <... mount resumed>) = 0 [pid 6846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6845] chdir("./file0") = 0 [pid 6845] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6845] ioctl(4, LOOP_CLR_FD) = 0 [pid 6845] close(4) = 0 [pid 6846] <... openat resumed>) = 3 [pid 6845] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6843] <... futex resumed>) = 0 [pid 6845] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6843] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... futex resumed>) = 0 [pid 6846] chdir("./file0" [pid 6843] <... futex resumed>) = 1 [pid 6845] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6846] <... chdir resumed>) = 0 [pid 6845] <... openat resumed>) = 4 [pid 6843] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6846] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6845] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... openat resumed>) = 4 [pid 6845] <... futex resumed>) = 0 [pid 6843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6846] ioctl(4, LOOP_CLR_FD [ 155.294566][ T6864] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6864) [pid 6845] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6846] <... ioctl resumed>) = 0 [pid 6843] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] close(4 [pid 6843] <... futex resumed>) = 1 [pid 6846] <... close resumed>) = 0 [pid 6843] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6846] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... futex resumed>) = 0 [pid 6846] <... futex resumed>) = 1 [pid 6845] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6842] <... futex resumed>) = 0 [pid 6846] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6845] <... fallocate resumed>) = 0 [pid 6842] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... openat resumed>) = 4 [pid 6845] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... futex resumed>) = 0 [pid 6845] <... futex resumed>) = 1 [pid 6843] <... futex resumed>) = 0 [pid 6845] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6843] exit_group(0 [pid 6842] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6846] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... futex resumed>) = ? [pid 6843] <... exit_group resumed>) = ? [pid 6846] <... futex resumed>) = 1 [pid 6845] +++ exited with 0 +++ [pid 6843] +++ exited with 0 +++ [pid 6842] <... futex resumed>) = 0 [pid 6846] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6842] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6843, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=34 /* 0.34 s */} --- [pid 6846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6842] <... futex resumed>) = 0 [pid 6846] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6842] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6846] <... fallocate resumed>) = 0 [pid 6846] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6842] <... futex resumed>) = 0 [pid 6842] exit_group(0) = ? [pid 6846] +++ exited with 0 +++ [pid 6842] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6842, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5242] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... openat resumed>) = 3 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(3, "", [pid 5241] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] <... openat resumed>) = 3 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5241] newfstatat(3, "", [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] unlink("./18/binderfs" [pid 5241] getdents64(3, [pid 5242] <... unlink resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./17/binderfs" [pid 5242] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... unlink resumed>) = 0 [ 155.384543][ T6864] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 155.441753][ T5242] BTRFS info (device loop2): last unmount of filesystem 47715a74-ec7a-4824-a2a2-da40a1f34074 [ 155.443162][ T6864] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 155.464546][ T5241] BTRFS info (device loop1): last unmount of filesystem ff676bd2-21c2-47ca-bb44-7f765e8c1f12 [pid 5241] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [ 155.531464][ T6864] BTRFS info (device loop4): using free-space-tree [pid 6920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./18/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./18") = 0 [pid 5242] mkdir("./19", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6946 ./strace-static-x86_64: Process 6946 attached [pid 6946] set_robust_list(0x55558b77b760, 24) = 0 [pid 6946] chdir("./19") = 0 [pid 6946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6946] setpgid(0, 0) = 0 [pid 6946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6946] write(3, "1000", 4) = 4 [pid 6946] close(3) = 0 [pid 6946] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6946] write(1, "executing program\n", 18) = 18 [pid 6946] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6946] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6946] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6946] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5240] <... umount2 resumed>) = 0 [pid 6946] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6864] <... mount resumed>) = 0 [pid 5240] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6946] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6949 attached [pid 5240] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6949] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5240] getdents64(4, [pid 6946] <... clone3 resumed> => {parent_tid=[6949]}, 88) = 6949 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 6864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5240] rmdir("./17/file0" [pid 6949] <... rseq resumed>) = 0 [pid 6864] <... openat resumed>) = 3 [pid 5240] <... rmdir resumed>) = 0 [pid 6864] chdir("./file0" [pid 6949] set_robust_list(0x7f511f03f9a0, 24 [pid 6946] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] getdents64(3, [pid 6946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6949] <... set_robust_list resumed>) = 0 [pid 6864] <... chdir resumed>) = 0 [pid 6949] rt_sigprocmask(SIG_SETMASK, [], [pid 6946] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5240] close(3 [pid 6949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6946] <... futex resumed>) = 0 [pid 6864] <... openat resumed>) = 4 [pid 5240] <... close resumed>) = 0 [pid 6946] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] rmdir("./17" [pid 6949] memfd_create("syzkaller", 0 [pid 6864] ioctl(4, LOOP_CLR_FD [pid 5240] <... rmdir resumed>) = 0 [pid 6864] <... ioctl resumed>) = 0 [pid 5240] mkdir("./18", 0777 [pid 6864] close(4) = 0 [pid 6864] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6863] <... futex resumed>) = 0 [pid 6864] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6863] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6864] <... openat resumed>) = 4 [pid 6863] <... futex resumed>) = 0 [pid 6863] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6949] <... memfd_create resumed>) = 3 [pid 6864] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6863] <... futex resumed>) = 0 [pid 6863] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6864] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6863] <... futex resumed>) = 0 [pid 6949] <... mmap resumed>) = 0x7f5116c00000 [pid 6864] <... fallocate resumed>) = 0 [pid 6863] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... mkdir resumed>) = 0 [pid 6864] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6864] <... futex resumed>) = 1 [pid 6864] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6863] <... futex resumed>) = 0 [pid 6863] exit_group(0./strace-static-x86_64: Process 6950 attached [pid 6950] set_robust_list(0x55558b77b760, 24 [pid 6864] <... futex resumed>) = ? [pid 6863] <... exit_group resumed>) = ? [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 6950 [pid 6950] <... set_robust_list resumed>) = 0 [pid 6950] chdir("./18" [pid 6864] +++ exited with 0 +++ [pid 6863] +++ exited with 0 +++ [pid 6950] <... chdir resumed>) = 0 [pid 6950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6950] setpgid(0, 0 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6863, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 6950] <... setpgid resumed>) = 0 [pid 6950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6950] <... openat resumed>) = 3 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./18/binderfs" [pid 6950] write(3, "1000", 4 [pid 5244] <... unlink resumed>) = 0 [pid 6950] <... write resumed>) = 4 [pid 6950] close(3 [pid 5244] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6950] <... close resumed>) = 0 [pid 6950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6950] write(1, "executing program\n", 18executing program ) = 18 [pid 6950] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6950] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6950] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6950] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6950] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6951 attached [pid 6951] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6950] <... clone3 resumed> => {parent_tid=[6951]}, 88) = 6951 [pid 6951] <... rseq resumed>) = 0 [pid 6950] rt_sigprocmask(SIG_SETMASK, [], [pid 6951] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 6950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6951] rt_sigprocmask(SIG_SETMASK, [], [pid 6950] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6951] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6950] <... futex resumed>) = 0 [pid 6950] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6951] memfd_create("syzkaller", 0) = 3 [pid 5241] <... umount2 resumed>) = 0 [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5241] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./17/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./17") = 0 [pid 5241] mkdir("./18", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6952 attached [pid 6952] set_robust_list(0x55558b77b760, 24 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 6952 [pid 6952] <... set_robust_list resumed>) = 0 [pid 6952] chdir("./18") = 0 [pid 6952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6952] setpgid(0, 0) = 0 [pid 6952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6952] write(3, "1000", 4) = 4 [pid 6952] close(3) = 0 [pid 6952] symlink("/dev/binderfs", "./binderfs") = 0 [ 155.883253][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6952] write(1, "executing program\n", 18executing program ) = 18 [pid 6952] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6952] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6952] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6952] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6952] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 6953 attached [pid 6953] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 6952] <... clone3 resumed> => {parent_tid=[6953]}, 88) = 6953 [pid 6953] <... rseq resumed>) = 0 [pid 6952] rt_sigprocmask(SIG_SETMASK, [], [pid 6953] set_robust_list(0x7f511f03f9a0, 24 [pid 6952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6953] <... set_robust_list resumed>) = 0 [pid 6952] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6952] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6953] memfd_create("syzkaller", 0) = 3 [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6920] <... write resumed>) = 16777216 [pid 6920] munmap(0x7f5116c00000, 138412032) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6920] close(3) = 0 [pid 6920] close(4) = 0 [pid 6920] mkdir("./file0", 0777) = 0 [ 156.109817][ T6920] loop3: detected capacity change from 0 to 32768 [ 156.138053][ T6920] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6920) [pid 6920] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 156.179640][ T6920] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./18/file0") = 0 [pid 5244] getdents64(3, [pid 6951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./18") = 0 [ 156.232718][ T6920] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 156.266822][ T6920] BTRFS info (device loop3): using free-space-tree [pid 5244] mkdir("./19", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6967 attached [pid 6967] set_robust_list(0x55558b77b760, 24) = 0 [pid 6967] chdir("./19") = 0 [pid 6967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6967] setpgid(0, 0) = 0 [pid 6967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6967] write(3, "1000", 4) = 4 [pid 6967] close(3 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 6967 [pid 6967] <... close resumed>) = 0 executing program [pid 6967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6967] write(1, "executing program\n", 18) = 18 [pid 6967] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6967] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6967] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 6920] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6971 attached [pid 6967] <... clone3 resumed> => {parent_tid=[6971]}, 88) = 6971 [pid 6967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6967] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6971] set_robust_list(0x7f511f03f9a0, 24 [pid 6920] <... openat resumed>) = 3 [pid 6971] <... set_robust_list resumed>) = 0 [pid 6967] <... futex resumed>) = 0 [pid 6920] chdir("./file0" [pid 6971] rt_sigprocmask(SIG_SETMASK, [], [pid 6967] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6920] <... chdir resumed>) = 0 [pid 6971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6971] memfd_create("syzkaller", 0 [pid 6920] <... openat resumed>) = 4 [pid 6971] <... memfd_create resumed>) = 3 [pid 6920] ioctl(4, LOOP_CLR_FD [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6920] <... ioctl resumed>) = 0 [pid 6971] <... mmap resumed>) = 0x7f5116c00000 [pid 6920] close(4) = 0 [pid 6920] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6920] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6912] <... futex resumed>) = 0 [pid 6912] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... futex resumed>) = 0 [pid 6912] <... futex resumed>) = 1 [pid 6920] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6912] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... openat resumed>) = 4 [pid 6920] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6912] <... futex resumed>) = 0 [pid 6920] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6912] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... fallocate resumed>) = 0 [pid 6912] <... futex resumed>) = 0 [pid 6920] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6912] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 0 [pid 6912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6920] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6912] exit_group(0 [pid 6920] <... futex resumed>) = ? [pid 6912] <... exit_group resumed>) = ? [pid 6920] +++ exited with 0 +++ [pid 6912] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6912, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 5243] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./18/binderfs") = 0 [pid 5243] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 156.543999][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6951] <... write resumed>) = 16777216 [pid 6951] munmap(0x7f5116c00000, 138412032) = 0 [pid 6951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6951] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6951] close(3) = 0 [pid 6951] close(4) = 0 [pid 6951] mkdir("./file0", 0777) = 0 [pid 6951] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6949] <... write resumed>) = 16777216 [pid 6949] munmap(0x7f5116c00000, 138412032) = 0 [ 156.672845][ T6951] loop0: detected capacity change from 0 to 32768 [ 156.702939][ T6951] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (6951) [pid 6949] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6949] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6949] close(3) = 0 [pid 6949] close(4) = 0 [pid 6949] mkdir("./file0", 0777) = 0 [ 156.765191][ T6949] loop2: detected capacity change from 0 to 32768 [ 156.801228][ T6951] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 156.844083][ T6949] BTRFS: device /dev/loop2 (7:2) using temp-fsid f8b6a861-4091-41c9-881a-28eb61f6274d [ 156.856120][ T6951] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.877673][ T6951] BTRFS info (device loop0): using free-space-tree [pid 6949] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5243] <... umount2 resumed>) = 0 [pid 6953] <... write resumed>) = 16777216 [pid 5243] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 156.887650][ T6949] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (6949) [pid 5243] newfstatat(4, "", [pid 6953] munmap(0x7f5116c00000, 138412032) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6953] <... openat resumed>) = 4 [pid 5243] getdents64(4, [pid 6953] ioctl(4, LOOP_SET_FD, 3 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./18/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./18") = 0 [pid 5243] mkdir("./19", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 6983 ./strace-static-x86_64: Process 6983 attached [pid 6983] set_robust_list(0x55558b77b760, 24) = 0 [ 156.953211][ T6949] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 156.975579][ T6953] loop1: detected capacity change from 0 to 32768 [pid 6983] chdir("./19") = 0 [pid 6953] <... ioctl resumed>) = 0 [pid 6983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6953] close(3 [pid 6983] <... prctl resumed>) = 0 [pid 6953] <... close resumed>) = 0 [pid 6953] close(4 [pid 6983] setpgid(0, 0) = 0 [pid 6953] <... close resumed>) = 0 [pid 6983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6953] mkdir("./file0", 0777 [pid 6983] <... openat resumed>) = 3 [pid 6953] <... mkdir resumed>) = 0 [pid 6983] write(3, "1000", 4 [pid 6953] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6983] <... write resumed>) = 4 [pid 6983] close(3) = 0 [pid 6983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6983] write(1, "executing program\n", 18executing program ) = 18 [pid 6983] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 6983] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 6983] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [ 156.999246][ T6949] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 157.019734][ T6949] BTRFS info (device loop2): using free-space-tree [ 157.042090][ T6953] BTRFS: device /dev/loop1 (7:1) using temp-fsid 488a7137-c894-4b79-b962-42ff40872275 [pid 6983] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6983] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[6989]}, 88) = 6989 [pid 6983] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6989 attached [pid 6989] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 6989] set_robust_list(0x7f511f03f9a0, 24 [pid 6983] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6983] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6989] <... set_robust_list resumed>) = 0 [pid 6989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6989] memfd_create("syzkaller", 0) = 3 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6951] <... mount resumed>) = 0 [pid 6951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6951] chdir("./file0") = 0 [pid 6951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6951] ioctl(4, LOOP_CLR_FD) = 0 [pid 6951] close(4) = 0 [pid 6951] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6950] <... futex resumed>) = 0 [pid 6951] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6950] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6950] <... futex resumed>) = 0 [pid 6951] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6950] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6951] <... openat resumed>) = 4 [ 157.094407][ T6953] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (6953) [pid 6951] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6950] <... futex resumed>) = 0 [pid 6951] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6950] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6950] <... futex resumed>) = 0 [pid 6951] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6950] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6951] <... fallocate resumed>) = 0 [pid 6951] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... futex resumed>) = 0 [pid 6951] <... futex resumed>) = 1 [pid 6950] exit_group(0) = ? [pid 6951] +++ exited with 0 +++ [pid 6950] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6950, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] <... write resumed>) = 16777216 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 157.169210][ T6953] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 157.203869][ T6953] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./18/binderfs" [pid 6971] munmap(0x7f5116c00000, 138412032 [pid 5240] <... unlink resumed>) = 0 [pid 5240] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] <... mount resumed>) = 0 [pid 6949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6971] <... munmap resumed>) = 0 [pid 6949] <... openat resumed>) = 3 [pid 6949] chdir("./file0") = 0 [pid 6949] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6971] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6949] <... openat resumed>) = 4 [pid 6949] ioctl(4, LOOP_CLR_FD [pid 6971] <... openat resumed>) = 4 [pid 6949] <... ioctl resumed>) = 0 [pid 6949] close(4 [pid 6971] ioctl(4, LOOP_SET_FD, 3 [pid 6949] <... close resumed>) = 0 [ 157.237241][ T6953] BTRFS info (device loop1): using free-space-tree [pid 6971] <... ioctl resumed>) = 0 [pid 6949] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] close(3 [pid 6949] <... futex resumed>) = 1 [pid 6971] <... close resumed>) = 0 [pid 6949] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6971] close(4) = 0 [pid 6946] <... futex resumed>) = 0 [pid 6971] mkdir("./file0", 0777 [pid 6946] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] <... mkdir resumed>) = 0 [pid 6949] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6946] <... futex resumed>) = 0 [pid 6971] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 6949] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6946] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6949] <... openat resumed>) = 4 [ 157.288561][ T6971] loop4: detected capacity change from 0 to 32768 [ 157.294715][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 6949] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] <... futex resumed>) = 0 [pid 6946] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6949] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 6949] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6946] <... futex resumed>) = 0 [pid 6946] exit_group(0) = ? [pid 6949] +++ exited with 0 +++ [pid 6946] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6946, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [ 157.340091][ T6971] BTRFS: device /dev/loop4 (7:4) using temp-fsid ce06fcde-a4cc-40ee-803c-6a8a08847ae4 [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./19/binderfs") = 0 [ 157.413683][ T6971] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (6971) [ 157.485232][ T5242] BTRFS info (device loop2): last unmount of filesystem f8b6a861-4091-41c9-881a-28eb61f6274d [ 157.506738][ T6971] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5242] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6953] <... mount resumed>) = 0 [pid 6953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6953] chdir("./file0") = 0 [pid 6989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6953] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6953] ioctl(4, LOOP_CLR_FD) = 0 [pid 6953] close(4) = 0 [pid 6953] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6953] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] <... futex resumed>) = 0 [pid 6952] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6952] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 157.556112][ T6971] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 157.587750][ T6971] BTRFS info (device loop4): using free-space-tree [pid 6953] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 6953] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6952] <... futex resumed>) = 0 [pid 6952] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6952] <... futex resumed>) = 0 [pid 6953] <... fallocate resumed>) = 0 [pid 6952] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6952] <... futex resumed>) = 0 [pid 6953] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] exit_group(0) = ? [pid 6953] <... futex resumed>) = ? [pid 6953] +++ exited with 0 +++ [pid 6952] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6952, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=25 /* 0.25 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./18/binderfs") = 0 [pid 5241] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] <... mount resumed>) = 0 [pid 6971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6971] chdir("./file0") = 0 [pid 5240] <... umount2 resumed>) = 0 [pid 6971] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5240] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] <... openat resumed>) = 4 [pid 6971] ioctl(4, LOOP_CLR_FD [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 157.766457][ T5241] BTRFS info (device loop1): last unmount of filesystem 488a7137-c894-4b79-b962-42ff40872275 [pid 6971] <... ioctl resumed>) = 0 [pid 5240] newfstatat(AT_FDCWD, "./18/file0", [pid 6971] close(4) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6967] <... futex resumed>) = 0 [pid 6971] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6967] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... futex resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6967] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... openat resumed>) = 4 [pid 5240] newfstatat(4, "", [pid 6971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6971] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5240] getdents64(4, [pid 6971] <... openat resumed>) = 4 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 6971] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] getdents64(4, [pid 6971] <... futex resumed>) = 1 [pid 6967] <... futex resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6971] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6967] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] close(4 [pid 6971] <... fallocate resumed>) = 0 [pid 6967] <... futex resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5240] rmdir("./18/file0" [pid 6971] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6971] <... futex resumed>) = 0 [pid 6967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... rmdir resumed>) = 0 [pid 6967] exit_group(0 [pid 6971] ???( [pid 5240] getdents64(3, [pid 6967] <... exit_group resumed>) = ? [pid 6971] <... ??? resumed>) = ? [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 6971] +++ exited with 0 +++ [pid 6967] +++ exited with 0 +++ [pid 5240] close(3) = 0 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6967, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 5240] rmdir("./18" [pid 5244] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] <... rmdir resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] mkdir("./19", 0777 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, [pid 5240] <... mkdir resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5244] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./19/binderfs") = 0 [pid 5240] <... openat resumed>) = 3 [pid 5244] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7040 ./strace-static-x86_64: Process 7040 attached [pid 5242] <... umount2 resumed>) = 0 [pid 7040] set_robust_list(0x55558b77b760, 24) = 0 [pid 7040] chdir("./19") = 0 [pid 5242] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7040] <... prctl resumed>) = 0 [pid 5242] newfstatat(AT_FDCWD, "./19/file0", [pid 7040] setpgid(0, 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7040] <... setpgid resumed>) = 0 [pid 5242] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] <... openat resumed>) = 3 [pid 5242] <... openat resumed>) = 4 [pid 5242] newfstatat(4, "", [pid 7040] write(3, "1000", 4 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7040] <... write resumed>) = 4 [pid 5242] getdents64(4, [pid 7040] close(3 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7040] <... close resumed>) = 0 [pid 5242] getdents64(4, [pid 7040] symlink("/dev/binderfs", "./binderfs" [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7040] <... symlink resumed>) = 0 [pid 5242] close(4executing program [pid 7040] write(1, "executing program\n", 18 [pid 5242] <... close resumed>) = 0 [pid 7040] <... write resumed>) = 18 [pid 5242] rmdir("./19/file0" [pid 7040] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... rmdir resumed>) = 0 [pid 7040] <... futex resumed>) = 0 [pid 5242] getdents64(3, [pid 7040] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7040] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7040] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5242] close(3 [pid 7040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7040] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5242] <... close resumed>) = 0 [pid 5242] rmdir("./19" [pid 7040] <... mprotect resumed>) = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 7040] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] mkdir("./20", 0777) = 0 [pid 7040] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7041 attached [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 7040] <... clone3 resumed> => {parent_tid=[7041]}, 88) = 7041 [pid 5242] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7040] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] close(3 [pid 7040] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... close resumed>) = 0 [pid 7040] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7042 attached [pid 7041] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7040] <... futex resumed>) = 0 [pid 7040] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 7042 [pid 7041] <... rseq resumed>) = 0 [pid 7042] set_robust_list(0x55558b77b760, 24) = 0 [pid 7042] chdir("./20") = 0 [pid 7042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7041] set_robust_list(0x7f511f03f9a0, 24 [pid 7042] <... prctl resumed>) = 0 [pid 7041] <... set_robust_list resumed>) = 0 [pid 7042] setpgid(0, 0 [pid 7041] rt_sigprocmask(SIG_SETMASK, [], [pid 7042] <... setpgid resumed>) = 0 [pid 7041] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7041] memfd_create("syzkaller", 0) = 3 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7042] <... openat resumed>) = 3 [ 157.956399][ T5244] BTRFS info (device loop4): last unmount of filesystem ce06fcde-a4cc-40ee-803c-6a8a08847ae4 [pid 7042] write(3, "1000", 4) = 4 [pid 7042] close(3) = 0 [pid 7042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7042] write(1, "executing program\n", 18executing program ) = 18 [pid 7042] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7042] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7042] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7043 attached => {parent_tid=[7043]}, 88) = 7043 [pid 6989] <... write resumed>) = 16777216 [pid 7042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7043] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7043] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7043] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7042] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7043] <... futex resumed>) = 0 [pid 7042] <... futex resumed>) = 1 [pid 7043] memfd_create("syzkaller", 0 [pid 7042] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6989] munmap(0x7f5116c00000, 138412032 [pid 7043] <... memfd_create resumed>) = 3 [pid 7043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6989] <... munmap resumed>) = 0 [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./18/file0", [pid 6989] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6989] <... openat resumed>) = 4 [pid 5241] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6989] ioctl(4, LOOP_SET_FD, 3 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6989] <... ioctl resumed>) = 0 [pid 6989] close(3 [pid 5241] <... openat resumed>) = 4 [pid 6989] <... close resumed>) = 0 [pid 5241] newfstatat(4, "", [pid 6989] close(4 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6989] <... close resumed>) = 0 [pid 5241] getdents64(4, [pid 6989] mkdir("./file0", 0777 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, [pid 6989] <... mkdir resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 6989] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5241] close(4) = 0 [pid 5241] rmdir("./18/file0") = 0 [ 158.185483][ T6989] loop3: detected capacity change from 0 to 32768 [pid 5241] getdents64(3, [pid 5244] <... umount2 resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5244] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] rmdir("./18" [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] <... rmdir resumed>) = 0 [ 158.229738][ T6989] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (6989) [pid 5241] mkdir("./19", 0777 [pid 5244] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./19/file0") = 0 [pid 5241] <... mkdir resumed>) = 0 [pid 5244] getdents64(3, [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./19") = 0 [pid 5244] mkdir("./20", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5241] <... openat resumed>) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3 [pid 5244] <... openat resumed>) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5241] <... close resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7045 attached [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7045] set_robust_list(0x55558b77b760, 24) = 0 [pid 7045] chdir("./20" [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7045 [pid 7045] <... chdir resumed>) = 0 [pid 7045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7045] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 7046 attached [pid 7045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 7046 [pid 7046] set_robust_list(0x55558b77b760, 24) = 0 [pid 7045] <... openat resumed>) = 3 [pid 7045] write(3, "1000", 4) = 4 executing program [pid 7045] close(3) = 0 [pid 7045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7045] write(1, "executing program\n", 18) = 18 [pid 7045] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7045] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7046] chdir("./19" [pid 7045] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7046] <... chdir resumed>) = 0 [pid 7045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7046] <... prctl resumed>) = 0 [pid 7046] setpgid(0, 0 [pid 7045] <... mmap resumed>) = 0x7f511f01f000 [pid 7046] <... setpgid resumed>) = 0 [pid 7045] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7047 attached [pid 7047] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7045] <... clone3 resumed> => {parent_tid=[7047]}, 88) = 7047 [pid 7047] <... rseq resumed>) = 0 [pid 7046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 158.275889][ T6989] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 158.297521][ T6989] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 7045] rt_sigprocmask(SIG_SETMASK, [], [pid 7047] set_robust_list(0x7f511f03f9a0, 24 [pid 7045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7047] <... set_robust_list resumed>) = 0 [pid 7045] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7047] rt_sigprocmask(SIG_SETMASK, [], [pid 7045] <... futex resumed>) = 0 [pid 7047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7045] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7047] memfd_create("syzkaller", 0) = 3 [pid 7047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7046] <... openat resumed>) = 3 [pid 7046] write(3, "1000", 4) = 4 [pid 7046] close(3) = 0 [pid 7046] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7046] write(1, "executing program\n", 18) = 18 [ 158.348312][ T6989] BTRFS info (device loop3): using free-space-tree [pid 7046] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7046] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[7052]}, 88) = 7052 [pid 7046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7046] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7052 attached [pid 7052] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7052] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7052] memfd_create("syzkaller", 0) = 3 [pid 7052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 6989] <... mount resumed>) = 0 [pid 6989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6989] chdir("./file0") = 0 [pid 6989] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6989] ioctl(4, LOOP_CLR_FD) = 0 [pid 6989] close(4) = 0 [pid 6989] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6983] <... futex resumed>) = 0 [pid 6983] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 6983] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] <... openat resumed>) = 4 [pid 7043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6989] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6983] <... futex resumed>) = 0 [pid 6989] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 6983] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] <... fallocate resumed>) = 0 [pid 6989] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6983] <... futex resumed>) = 0 [pid 6989] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6983] exit_group(0 [pid 6989] <... futex resumed>) = ? [pid 6983] <... exit_group resumed>) = ? [pid 6989] +++ exited with 0 +++ [pid 6983] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6983, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=27 /* 0.27 s */} --- [pid 5243] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./19/binderfs") = 0 [ 158.653238][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5243] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5243] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./19/file0", [pid 7047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, [pid 7041] <... write resumed>) = 16777216 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7041] munmap(0x7f5116c00000, 138412032 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./19/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./19") = 0 [pid 5243] mkdir("./20", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7065 attached , child_tidptr=0x55558b77b750) = 7065 [pid 7041] <... munmap resumed>) = 0 [pid 7065] set_robust_list(0x55558b77b760, 24 [pid 7052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7065] <... set_robust_list resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7065] chdir("./20" [pid 7041] <... openat resumed>) = 4 [pid 7065] <... chdir resumed>) = 0 [pid 7065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7041] ioctl(4, LOOP_SET_FD, 3 [pid 7065] <... prctl resumed>) = 0 [pid 7065] setpgid(0, 0) = 0 [pid 7065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7065] write(3, "1000", 4) = 4 [pid 7041] <... ioctl resumed>) = 0 [pid 7041] close(3) = 0 [pid 7041] close(4 [pid 7065] close(3 [pid 7041] <... close resumed>) = 0 [pid 7065] <... close resumed>) = 0 [pid 7065] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7065] write(1, "executing program\n", 18 [pid 7041] mkdir("./file0", 0777 [pid 7065] <... write resumed>) = 18 [pid 7041] <... mkdir resumed>) = 0 [ 158.893037][ T7041] loop0: detected capacity change from 0 to 32768 [pid 7041] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7065] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7065] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7065] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7065] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7065] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7066 attached => {parent_tid=[7066]}, 88) = 7066 [pid 7066] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7065] rt_sigprocmask(SIG_SETMASK, [], [pid 7066] set_robust_list(0x7f511f03f9a0, 24 [pid 7065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7066] <... set_robust_list resumed>) = 0 [pid 7065] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] rt_sigprocmask(SIG_SETMASK, [], [pid 7065] <... futex resumed>) = 0 [pid 7066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7065] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7066] memfd_create("syzkaller", 0) = 3 [ 158.946828][ T7041] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7041) [pid 7066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7043] <... write resumed>) = 16777216 [ 159.017353][ T7041] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7043] munmap(0x7f5116c00000, 138412032) = 0 [pid 7043] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 159.064054][ T7041] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 159.094947][ T7041] BTRFS info (device loop0): using free-space-tree [pid 7043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7043] close(3) = 0 [pid 7043] close(4) = 0 [pid 7043] mkdir("./file0", 0777) = 0 [ 159.127782][ T7043] loop2: detected capacity change from 0 to 32768 [ 159.196470][ T7043] BTRFS: device /dev/loop2 (7:2) using temp-fsid f7e272fa-0de7-4f48-8e90-10721f1ee447 [pid 7043] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7047] <... write resumed>) = 16777216 [pid 7047] munmap(0x7f5116c00000, 138412032) = 0 [pid 7047] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 159.239418][ T7043] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7043) [pid 7047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7047] close(3) = 0 [pid 7047] close(4) = 0 [pid 7047] mkdir("./file0", 0777) = 0 [ 159.298646][ T7047] loop4: detected capacity change from 0 to 32768 [ 159.320191][ T7043] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 159.331286][ T7043] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 159.339999][ T7043] BTRFS info (device loop2): using free-space-tree [ 159.351330][ T7047] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6e4df6e5-7414-4435-877f-2f4082bd3192 [pid 7047] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7041] <... mount resumed>) = 0 [pid 7041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7041] chdir("./file0") = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7041] ioctl(4, LOOP_CLR_FD) = 0 [pid 7041] close(4) = 0 [pid 7041] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7040] <... futex resumed>) = 0 [pid 7040] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [ 159.397205][ T7047] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7047) [pid 7041] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7040] <... futex resumed>) = 0 [pid 7041] <... openat resumed>) = 4 [pid 7040] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7052] <... write resumed>) = 16777216 [pid 7041] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7052] munmap(0x7f5116c00000, 138412032 [pid 7041] <... futex resumed>) = 1 [pid 7040] <... futex resumed>) = 0 [pid 7040] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7052] <... munmap resumed>) = 0 [pid 7041] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [ 159.445938][ T7047] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 159.482685][ T7047] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 7052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7041] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7040] <... futex resumed>) = 0 [pid 7052] <... openat resumed>) = 4 [pid 7041] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] exit_group(0 [pid 7052] ioctl(4, LOOP_SET_FD, 3 [pid 7041] <... futex resumed>) = ? [pid 7040] <... exit_group resumed>) = ? [pid 7041] +++ exited with 0 +++ [pid 7040] +++ exited with 0 +++ [pid 7066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7052] <... ioctl resumed>) = 0 [pid 7043] <... mount resumed>) = 0 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7040, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 7052] close(3) = 0 [pid 5240] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7052] close(4 [pid 7043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7052] <... close resumed>) = 0 [pid 7043] <... openat resumed>) = 3 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7052] mkdir("./file0", 0777 [pid 7043] chdir("./file0" [pid 5240] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7052] <... mkdir resumed>) = 0 [pid 7043] <... chdir resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 7052] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 159.492714][ T7047] BTRFS info (device loop4): using free-space-tree [ 159.510625][ T7052] loop1: detected capacity change from 0 to 32768 [pid 7043] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5240] newfstatat(3, "", [pid 7043] <... openat resumed>) = 4 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7043] ioctl(4, LOOP_CLR_FD) = 0 [pid 5240] getdents64(3, [pid 7043] close(4) = 0 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7043] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7042] <... futex resumed>) = 0 [pid 5240] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7043] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7042] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7043] <... openat resumed>) = 4 [pid 7042] <... futex resumed>) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7043] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] newfstatat(AT_FDCWD, "./19/binderfs", [pid 7043] <... futex resumed>) = 0 [pid 7042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7043] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7042] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] unlink("./19/binderfs" [pid 7043] <... fallocate resumed>) = 0 [pid 7042] <... futex resumed>) = 0 [pid 7043] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... unlink resumed>) = 0 [pid 7043] <... futex resumed>) = 0 [pid 7042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7043] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] exit_group(0 [pid 7043] <... futex resumed>) = ? [pid 7042] <... exit_group resumed>) = ? [pid 7043] +++ exited with 0 +++ [pid 7042] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7042, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=24 /* 0.24 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./20/binderfs") = 0 [ 159.554581][ T7052] BTRFS: device /dev/loop1 (7:1) using temp-fsid d2087c1c-3fae-44c2-8ffa-84fe940e3d67 [ 159.582064][ T7052] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7052) [ 159.622468][ T5242] BTRFS info (device loop2): last unmount of filesystem f7e272fa-0de7-4f48-8e90-10721f1ee447 [ 159.647149][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 159.668966][ T7052] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5242] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7047] <... mount resumed>) = 0 [pid 7047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7047] chdir("./file0") = 0 [pid 7047] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7047] ioctl(4, LOOP_CLR_FD) = 0 [pid 7047] close(4 [pid 5242] <... umount2 resumed>) = 0 [pid 7047] <... close resumed>) = 0 [ 159.716462][ T7052] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 7047] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7047] <... futex resumed>) = 1 [pid 7045] <... futex resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7045] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] newfstatat(AT_FDCWD, "./20/file0", [pid 7045] <... futex resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7047] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7045] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7047] <... openat resumed>) = 4 [pid 5242] <... openat resumed>) = 4 [pid 7047] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./20/file0") = 0 [pid 5242] getdents64(3, [pid 7047] <... futex resumed>) = 1 [pid 7045] <... futex resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7045] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] close(3 [pid 7045] <... futex resumed>) = 0 [pid 5242] <... close resumed>) = 0 [pid 7045] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] rmdir("./20") = 0 [pid 5242] mkdir("./21", 0777 [pid 7047] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5242] <... mkdir resumed>) = 0 [pid 7047] <... fallocate resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7047] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... openat resumed>) = 3 [pid 7047] <... futex resumed>) = 1 [pid 7045] <... futex resumed>) = 0 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 7047] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7045] exit_group(0 [pid 5242] <... ioctl resumed>) = 0 [pid 7047] <... futex resumed>) = ? [pid 7045] <... exit_group resumed>) = ? [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7120 attached [pid 7047] +++ exited with 0 +++ [pid 7045] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7045, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=32 /* 0.32 s */} --- [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 7120 [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] set_robust_list(0x55558b77b760, 24 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7120] <... set_robust_list resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7120] chdir("./21" [pid 5244] <... openat resumed>) = 3 [ 159.771575][ T7052] BTRFS info (device loop1): using free-space-tree [pid 7120] <... chdir resumed>) = 0 [pid 5244] newfstatat(3, "", [pid 7120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7120] <... prctl resumed>) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7120] setpgid(0, 0 [pid 5244] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] <... setpgid resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] newfstatat(AT_FDCWD, "./20/binderfs", [pid 7120] <... openat resumed>) = 3 [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7120] write(3, "1000", 4 [pid 5244] unlink("./20/binderfs" [pid 7120] <... write resumed>) = 4 [pid 5244] <... unlink resumed>) = 0 [pid 5244] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] close(3) = 0 [pid 7120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7120] write(1, "executing program\n", 18executing program ) = 18 [pid 7120] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7120] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7120] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7120] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7127 attached => {parent_tid=[7127]}, 88) = 7127 [pid 7127] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7127] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7127] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7066] <... write resumed>) = 16777216 [pid 7120] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = 0 [pid 7120] <... futex resumed>) = 1 [pid 7127] memfd_create("syzkaller", 0 [pid 7120] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7066] munmap(0x7f5116c00000, 138412032 [pid 7127] <... memfd_create resumed>) = 3 [pid 7127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7066] <... munmap resumed>) = 0 [pid 7066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7066] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7066] close(3) = 0 [pid 7066] close(4) = 0 [pid 7066] mkdir("./file0", 0777) = 0 [ 159.904441][ T5244] BTRFS info (device loop4): last unmount of filesystem 6e4df6e5-7414-4435-877f-2f4082bd3192 [ 159.944175][ T7066] loop3: detected capacity change from 0 to 32768 [pid 7066] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7052] <... mount resumed>) = 0 [pid 5240] <... umount2 resumed>) = 0 [ 159.977578][ T7066] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7066) [ 160.002756][ T7066] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 160.013210][ T7066] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 7052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7052] chdir("./file0" [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7052] <... chdir resumed>) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7052] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5240] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7052] ioctl(4, LOOP_CLR_FD [pid 5240] <... openat resumed>) = 4 [ 160.022323][ T7066] BTRFS info (device loop3): using free-space-tree [pid 5240] newfstatat(4, "", [pid 7052] <... ioctl resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./19/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./19" [pid 7052] close(4) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./20", 0777 [pid 7052] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... mkdir resumed>) = 0 [pid 7052] <... futex resumed>) = 1 [pid 7052] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7046] <... futex resumed>) = 0 [pid 5240] close(3 [pid 7046] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... close resumed>) = 0 [pid 7052] <... futex resumed>) = 0 [pid 7046] <... futex resumed>) = 1 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7052] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7046] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7145 attached [pid 7052] <... openat resumed>) = 4 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 7145 [pid 7052] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7145] set_robust_list(0x55558b77b760, 24 [pid 7052] <... futex resumed>) = 1 [pid 7046] <... futex resumed>) = 0 [pid 7145] <... set_robust_list resumed>) = 0 [pid 7052] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7046] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7145] chdir("./20" [pid 7052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7145] <... chdir resumed>) = 0 [pid 7052] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7046] <... futex resumed>) = 0 [pid 7046] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7052] <... fallocate resumed>) = 0 [pid 7145] <... prctl resumed>) = 0 [pid 7052] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7145] setpgid(0, 0 [pid 7052] <... futex resumed>) = 1 [pid 7046] <... futex resumed>) = 0 [pid 7145] <... setpgid resumed>) = 0 [pid 7052] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7046] exit_group(0 [pid 7145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7052] <... futex resumed>) = ? [pid 7046] <... exit_group resumed>) = ? [pid 7052] +++ exited with 0 +++ [pid 7145] <... openat resumed>) = 3 [pid 7145] write(3, "1000", 4 [pid 7046] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7046, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=33 /* 0.33 s */} --- [pid 7145] <... write resumed>) = 4 [pid 7145] close(3) = 0 [pid 7145] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5241] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] write(1, "executing program\n", 18 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7145] <... write resumed>) = 18 [pid 7145] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7145] <... futex resumed>) = 0 [pid 5241] <... openat resumed>) = 3 [pid 7145] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7145] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7145] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[7150]}, 88) = 7150 [pid 7145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7145] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7150 attached [pid 7145] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7150] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7150] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7150] memfd_create("syzkaller", 0) = 3 [pid 5241] newfstatat(3, "", [pid 7150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./19/binderfs") = 0 [pid 5241] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7066] <... mount resumed>) = 0 [pid 7066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7066] chdir("./file0") = 0 [pid 7066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7066] ioctl(4, LOOP_CLR_FD) = 0 [pid 7066] close(4) = 0 [pid 7066] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] <... futex resumed>) = 0 [pid 7065] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7065] <... futex resumed>) = 0 [pid 7066] <... openat resumed>) = 4 [pid 7065] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7066] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] <... futex resumed>) = 0 [pid 7065] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7065] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7066] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7066] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] <... futex resumed>) = 0 [pid 7065] exit_group(0) = ? [pid 7066] +++ exited with 0 +++ [pid 7065] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7065, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5243] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./20/binderfs") = 0 [pid 5243] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... umount2 resumed>) = 0 [ 160.229817][ T5241] BTRFS info (device loop1): last unmount of filesystem d2087c1c-3fae-44c2-8ffa-84fe940e3d67 [pid 5244] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [ 160.311536][ T5243] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5244] rmdir("./20/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./20") = 0 [pid 5244] mkdir("./21", 0777) = 0 [pid 5243] <... umount2 resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... openat resumed>) = 3 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./20/file0", [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5244] <... close resumed>) = 0 [pid 5243] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7152 attached [pid 5243] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7152 [pid 5243] <... openat resumed>) = 4 [pid 7152] set_robust_list(0x55558b77b760, 24) = 0 [pid 5243] newfstatat(4, "", [pid 7152] chdir("./21" [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7152] <... chdir resumed>) = 0 [pid 5243] getdents64(4, [pid 7152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7152] setpgid(0, 0 [pid 5243] getdents64(4, [pid 7152] <... setpgid resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] close(4) = 0 [pid 5243] rmdir("./20/file0" [pid 7152] <... openat resumed>) = 3 [pid 7152] write(3, "1000", 4 [pid 5243] <... rmdir resumed>) = 0 [pid 7152] <... write resumed>) = 4 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7152] close(3) = 0 [pid 5243] close(3 [pid 7152] symlink("/dev/binderfs", "./binderfs" [pid 5243] <... close resumed>) = 0 [pid 7152] <... symlink resumed>) = 0 [pid 5243] rmdir("./20"executing program [pid 7152] write(1, "executing program\n", 18 [pid 5243] <... rmdir resumed>) = 0 [pid 7152] <... write resumed>) = 18 [pid 5243] mkdir("./21", 0777 [pid 7152] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] <... mkdir resumed>) = 0 [pid 7152] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7152] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... openat resumed>) = 3 [pid 7152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7152] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] ioctl(3, LOOP_CLR_FD [pid 7152] <... mprotect resumed>) = 0 [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7152] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] close(3 [pid 7152] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] <... close resumed>) = 0 ./strace-static-x86_64: Process 7153 attached [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7153] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7153] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7153] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 7154 ./strace-static-x86_64: Process 7154 attached [pid 7154] set_robust_list(0x55558b77b760, 24 [pid 7152] <... clone3 resumed> => {parent_tid=[7153]}, 88) = 7153 [pid 7154] <... set_robust_list resumed>) = 0 [pid 7152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7154] chdir("./21" [pid 7152] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] <... futex resumed>) = 0 [pid 7152] <... futex resumed>) = 1 [pid 7153] memfd_create("syzkaller", 0 [pid 7152] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7154] <... chdir resumed>) = 0 [pid 7153] <... memfd_create resumed>) = 3 [pid 7154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7154] <... prctl resumed>) = 0 [pid 7153] <... mmap resumed>) = 0x7f5116c00000 [pid 7154] setpgid(0, 0 [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] <... setpgid resumed>) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5241] newfstatat(AT_FDCWD, "./19/file0", [pid 7154] <... openat resumed>) = 3 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7154] write(3, "1000", 4 [pid 5241] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7154] <... write resumed>) = 4 [pid 5241] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7154] close(3 [pid 5241] <... openat resumed>) = 4 [pid 7154] <... close resumed>) = 0 [pid 5241] newfstatat(4, "", [pid 7154] symlink("/dev/binderfs", "./binderfs" [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, [pid 7154] <... symlink resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 executing program [pid 7150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7154] write(1, "executing program\n", 18 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7154] <... write resumed>) = 18 [pid 5241] close(4 [pid 7154] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... close resumed>) = 0 [pid 7154] <... futex resumed>) = 0 [pid 7154] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7127] <... write resumed>) = 16777216 [pid 5241] rmdir("./19/file0" [pid 7154] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7154] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7127] munmap(0x7f5116c00000, 138412032 [pid 5241] <... rmdir resumed>) = 0 [pid 7154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] getdents64(3, [pid 7154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7154] <... mmap resumed>) = 0x7f511f01f000 [pid 5241] close(3 [pid 7154] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5241] <... close resumed>) = 0 [pid 7154] <... mprotect resumed>) = 0 [pid 5241] rmdir("./19" [pid 7154] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5241] <... rmdir resumed>) = 0 [pid 7154] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5241] mkdir("./20", 0777 [pid 7154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5241] <... mkdir resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7154] <... clone3 resumed> => {parent_tid=[7155]}, 88) = 7155 [pid 5241] <... openat resumed>) = 3 [pid 7154] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] ioctl(3, LOOP_CLR_FD [pid 7154] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 7155 attached [pid 7154] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7154] <... futex resumed>) = 0 [pid 7155] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7154] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7155] <... rseq resumed>) = 0 [pid 7155] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7155] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] close(3) = 0 [pid 7155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7155] memfd_create("syzkaller", 0) = 3 [pid 7155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7127] <... munmap resumed>) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7156 attached [pid 7127] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7156] set_robust_list(0x55558b77b760, 24 [pid 7127] <... openat resumed>) = 4 [pid 7156] <... set_robust_list resumed>) = 0 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 7156 [pid 7156] chdir("./20" [pid 7127] ioctl(4, LOOP_SET_FD, 3 [pid 7156] <... chdir resumed>) = 0 [pid 7156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7127] <... ioctl resumed>) = 0 [pid 7127] close(3 [pid 7156] setpgid(0, 0) = 0 [pid 7127] <... close resumed>) = 0 [pid 7127] close(4 [pid 7156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7127] <... close resumed>) = 0 [ 160.760988][ T7127] loop2: detected capacity change from 0 to 32768 [pid 7156] <... openat resumed>) = 3 [pid 7127] mkdir("./file0", 0777) = 0 [pid 7127] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7156] write(3, "1000", 4) = 4 [pid 7156] close(3) = 0 [pid 7156] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7156] write(1, "executing program\n", 18) = 18 [pid 7156] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7156] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7156] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7156] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [ 160.807679][ T7127] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7127) [pid 7156] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7157 attached [pid 7157] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7156] <... clone3 resumed> => {parent_tid=[7157]}, 88) = 7157 [pid 7157] <... rseq resumed>) = 0 [pid 7156] rt_sigprocmask(SIG_SETMASK, [], [pid 7157] set_robust_list(0x7f511f03f9a0, 24 [pid 7156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7157] <... set_robust_list resumed>) = 0 [pid 7156] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 160.873502][ T7127] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 160.899427][ T7127] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 7156] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7157] memfd_create("syzkaller", 0) = 3 [pid 7157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 160.923670][ T7127] BTRFS info (device loop2): using free-space-tree [pid 7150] <... write resumed>) = 16777216 [pid 7150] munmap(0x7f5116c00000, 138412032) = 0 [pid 7127] <... mount resumed>) = 0 [pid 7127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7150] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7127] chdir("./file0") = 0 [pid 7150] <... openat resumed>) = 4 [pid 7150] ioctl(4, LOOP_SET_FD, 3 [pid 7127] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7127] ioctl(4, LOOP_CLR_FD) = 0 [pid 7127] close(4) = 0 [pid 7127] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7120] <... futex resumed>) = 0 [pid 7120] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7120] <... futex resumed>) = 0 [pid 7120] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... openat resumed>) = 4 [pid 7127] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7120] <... futex resumed>) = 0 [pid 7120] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7120] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7150] <... ioctl resumed>) = 0 [pid 7150] close(3 [pid 7127] <... fallocate resumed>) = 0 [pid 7150] <... close resumed>) = 0 [pid 7150] close(4 [pid 7153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7150] <... close resumed>) = 0 [pid 7127] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] mkdir("./file0", 0777 [pid 7127] <... futex resumed>) = 1 [pid 7120] <... futex resumed>) = 0 [pid 7120] exit_group(0) = ? [pid 7150] <... mkdir resumed>) = 0 [pid 7127] +++ exited with 0 +++ [pid 7120] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7120, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=31 /* 0.31 s */} --- [ 161.073471][ T7150] loop0: detected capacity change from 0 to 32768 [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7150] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./21/binderfs") = 0 [ 161.148366][ T7150] BTRFS: device /dev/loop0 (7:0) using temp-fsid 425a50cd-74fb-48bc-8959-bec2d9dc9410 [ 161.184548][ T7150] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7150) [ 161.254643][ T7150] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 161.266569][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 161.287215][ T7150] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 5242] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 161.313297][ T7150] BTRFS info (device loop0): using free-space-tree [pid 7155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7157] <... write resumed>) = 16777216 [pid 7157] munmap(0x7f5116c00000, 138412032) = 0 [pid 7157] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7157] close(3) = 0 [pid 7157] close(4) = 0 [pid 7157] mkdir("./file0", 0777) = 0 [ 161.473489][ T7157] loop1: detected capacity change from 0 to 32768 [ 161.538967][ T7157] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7157) [ 161.573187][ T7157] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7157] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7155] <... write resumed>) = 16777216 [pid 7155] munmap(0x7f5116c00000, 138412032 [pid 7150] <... mount resumed>) = 0 [pid 7150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7150] chdir("./file0") = 0 [ 161.593307][ T7157] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 161.610899][ T7157] BTRFS info (device loop1): using free-space-tree [pid 7150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7155] <... munmap resumed>) = 0 [pid 7155] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7150] ioctl(4, LOOP_CLR_FD [pid 7155] <... openat resumed>) = 4 [pid 7150] <... ioctl resumed>) = 0 [pid 7155] ioctl(4, LOOP_SET_FD, 3 [pid 7150] close(4) = 0 [pid 7150] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7150] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7145] <... futex resumed>) = 0 [pid 7150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7145] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7145] <... futex resumed>) = 0 [pid 7153] <... write resumed>) = 16777216 [pid 7150] <... openat resumed>) = 4 [pid 7145] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... umount2 resumed>) = 0 [pid 7153] munmap(0x7f5116c00000, 138412032 [pid 5242] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7150] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... ioctl resumed>) = 0 [pid 7153] <... munmap resumed>) = 0 [pid 5242] newfstatat(AT_FDCWD, "./21/file0", [pid 7155] close(3) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7150] <... futex resumed>) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7150] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7145] exit_group(0) = ? [pid 7150] +++ exited with 0 +++ [pid 7145] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7145, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 5242] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, [pid 7155] close(4 [pid 5240] <... restart_syscall resumed>) = 0 [pid 7155] <... close resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7155] mkdir("./file0", 0777 [pid 5240] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7155] <... mkdir resumed>) = 0 [pid 7153] <... openat resumed>) = 4 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./20/binderfs") = 0 [pid 5240] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 161.666645][ T7155] loop3: detected capacity change from 0 to 32768 [pid 7155] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7153] close(3) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7153] close(4) = 0 [pid 5242] close(4 [pid 7153] mkdir("./file0", 0777) = 0 [pid 5242] <... close resumed>) = 0 [ 161.726867][ T7153] loop4: detected capacity change from 0 to 32768 [ 161.738543][ T7155] BTRFS: device /dev/loop3 (7:3) using temp-fsid 6cd05102-8acf-413b-b011-9595c3272d32 [pid 7153] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5242] rmdir("./21/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./21") = 0 [pid 5242] mkdir("./22", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7204 attached [ 161.770300][ T5240] BTRFS info (device loop0): last unmount of filesystem 425a50cd-74fb-48bc-8959-bec2d9dc9410 [ 161.798361][ T7155] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7155) , child_tidptr=0x55558b77b750) = 7204 [pid 7204] set_robust_list(0x55558b77b760, 24) = 0 [ 161.818296][ T7153] BTRFS: device /dev/loop4 (7:4) using temp-fsid 568ce577-9cf1-4de4-804b-0153f26b74f8 [ 161.835666][ T7153] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7153) [ 161.845546][ T7155] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7204] chdir("./22") = 0 [pid 7204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7204] setpgid(0, 0 [pid 7157] <... mount resumed>) = 0 [pid 7204] <... setpgid resumed>) = 0 [pid 7157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7157] chdir("./file0" [pid 7204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7157] <... chdir resumed>) = 0 [pid 7157] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7157] ioctl(4, LOOP_CLR_FD) = 0 [ 161.869118][ T7155] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 161.890092][ T7153] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 161.901425][ T7155] BTRFS info (device loop3): using free-space-tree [ 161.911893][ T7153] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [pid 7204] <... openat resumed>) = 3 [pid 7157] close(4 [pid 7204] write(3, "1000", 4) = 4 [pid 7204] close(3 [pid 7157] <... close resumed>) = 0 [pid 7204] <... close resumed>) = 0 [pid 7157] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7204] write(1, "executing program\n", 18executing program [pid 7156] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] <... write resumed>) = 18 [pid 7157] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7156] <... futex resumed>) = 0 [pid 7204] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7156] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] <... futex resumed>) = 0 [pid 7157] <... openat resumed>) = 4 [pid 7204] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7157] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7204] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7157] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7156] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7156] <... futex resumed>) = 0 [pid 7204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7157] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7156] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] <... mmap resumed>) = 0x7f511f01f000 [pid 7157] <... fallocate resumed>) = 0 [pid 7204] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7157] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] <... mprotect resumed>) = 0 [pid 7157] <... futex resumed>) = 1 [pid 7156] <... futex resumed>) = 0 [pid 7204] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7157] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7156] exit_group(0 [pid 7204] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7157] <... futex resumed>) = ? [pid 7156] <... exit_group resumed>) = ? [pid 7204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7157] +++ exited with 0 +++ [pid 7156] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7156, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7219 attached [pid 7204] <... clone3 resumed> => {parent_tid=[7219]}, 88) = 7219 [pid 5241] <... restart_syscall resumed>) = 0 [pid 7219] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7219] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7219] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7219] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 161.923194][ T7153] BTRFS info (device loop4): using free-space-tree [pid 7204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5241] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7204] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7204] <... futex resumed>) = 1 [pid 7204] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5241] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7219] <... futex resumed>) = 0 [pid 7219] memfd_create("syzkaller", 0 [pid 5241] unlink("./20/binderfs" [pid 7219] <... memfd_create resumed>) = 3 [pid 7219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5241] <... unlink resumed>) = 0 [ 162.073496][ T5241] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5241] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7155] <... mount resumed>) = 0 [pid 7155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7153] <... mount resumed>) = 0 [pid 7155] <... openat resumed>) = 3 [pid 7153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7155] chdir("./file0") = 0 [pid 7153] <... openat resumed>) = 3 [pid 7155] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7153] chdir("./file0" [pid 7155] ioctl(4, LOOP_CLR_FD [pid 7153] <... chdir resumed>) = 0 [pid 7155] <... ioctl resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7155] close(4) = 0 [pid 7153] <... openat resumed>) = 4 [pid 7155] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] ioctl(4, LOOP_CLR_FD [pid 7155] <... futex resumed>) = 1 [pid 7155] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] <... futex resumed>) = 0 [pid 7153] <... ioctl resumed>) = 0 [pid 7153] close(4 [pid 7154] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = 1 [pid 7155] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7154] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... openat resumed>) = 4 [pid 7153] <... close resumed>) = 0 [pid 7153] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] <... futex resumed>) = 1 [pid 7152] <... futex resumed>) = 0 [pid 7155] <... futex resumed>) = 1 [pid 7153] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7152] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7152] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = 0 [pid 7152] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7154] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] <... openat resumed>) = 4 [pid 7153] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = 1 [pid 7154] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... futex resumed>) = 0 [pid 7155] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7153] <... futex resumed>) = 1 [pid 7152] <... futex resumed>) = 0 [pid 7155] <... fallocate resumed>) = 0 [pid 7153] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7152] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] <... fallocate resumed>) = 0 [pid 7152] <... futex resumed>) = 0 [pid 7152] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... futex resumed>) = 1 [pid 7154] <... futex resumed>) = 0 [pid 7153] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] exit_group(0 [pid 7153] <... futex resumed>) = 1 [pid 7152] <... futex resumed>) = 0 [pid 7155] <... futex resumed>) = ? [pid 7154] <... exit_group resumed>) = ? [pid 7153] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7152] exit_group(0 [pid 7155] +++ exited with 0 +++ [pid 7154] +++ exited with 0 +++ [pid 7153] <... futex resumed>) = ? [pid 7152] <... exit_group resumed>) = ? [pid 7153] +++ exited with 0 +++ [pid 7152] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7152, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 5244] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./21/binderfs") = 0 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7154, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=28 /* 0.28 s */} --- [pid 5241] <... umount2 resumed>) = 0 [pid 5244] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(4, "", [pid 5243] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, [pid 5241] getdents64(4, [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, [pid 5243] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5241] <... close resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] rmdir("./20/file0" [pid 5243] unlink("./21/binderfs" [pid 5241] <... rmdir resumed>) = 0 [pid 5243] <... unlink resumed>) = 0 [ 162.265827][ T5244] BTRFS info (device loop4): last unmount of filesystem 568ce577-9cf1-4de4-804b-0153f26b74f8 [pid 5243] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] getdents64(3, [pid 5240] <... umount2 resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./20" [pid 5240] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... rmdir resumed>) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] mkdir("./21", 0777) = 0 [pid 5240] newfstatat(AT_FDCWD, "./20/file0", [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5240] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] close(3) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7241 attached [pid 5240] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7241] set_robust_list(0x55558b77b760, 24 [pid 5240] <... openat resumed>) = 4 [pid 7241] <... set_robust_list resumed>) = 0 [pid 5240] newfstatat(4, "", [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 7241 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7241] chdir("./21" [pid 5240] getdents64(4, [pid 7241] <... chdir resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5240] getdents64(4, [pid 7241] <... prctl resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7241] setpgid(0, 0 [pid 5240] close(4 [pid 7241] <... setpgid resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 7241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] rmdir("./20/file0" [pid 7241] <... openat resumed>) = 3 [pid 5240] <... rmdir resumed>) = 0 [pid 7241] write(3, "1000", 4 [pid 5240] getdents64(3, [pid 7241] <... write resumed>) = 4 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7241] close(3 [pid 5240] close(3) = 0 [pid 7241] <... close resumed>) = 0 [pid 5240] rmdir("./20") = 0 [pid 5240] mkdir("./21", 0777 [pid 7241] symlink("/dev/binderfs", "./binderfs" [pid 5240] <... mkdir resumed>) = 0 [pid 7241] <... symlink resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7241] write(1, "executing program\n", 18 [pid 5240] <... openat resumed>) = 3 executing program [pid 7241] <... write resumed>) = 18 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7241] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7242 [ 162.365297][ T5243] BTRFS info (device loop3): last unmount of filesystem 6cd05102-8acf-413b-b011-9595c3272d32 ./strace-static-x86_64: Process 7242 attached [pid 7241] <... futex resumed>) = 0 [pid 7241] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7242] set_robust_list(0x55558b77b760, 24 [pid 7241] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7242] <... set_robust_list resumed>) = 0 [pid 7241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7242] chdir("./21" [pid 7241] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7242] <... chdir resumed>) = 0 [pid 7219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7241] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7241] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7242] <... prctl resumed>) = 0 [pid 7241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7243 attached [pid 7242] setpgid(0, 0 [pid 7241] <... clone3 resumed> => {parent_tid=[7243]}, 88) = 7243 [pid 7241] rt_sigprocmask(SIG_SETMASK, [], [pid 7243] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7243] <... rseq resumed>) = 0 [pid 7241] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7243] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7242] <... setpgid resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7243] memfd_create("syzkaller", 0 [pid 7242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7241] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7243] <... memfd_create resumed>) = 3 [pid 7242] <... openat resumed>) = 3 [pid 7243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7242] write(3, "1000", 4) = 4 [pid 7242] close(3) = 0 [pid 7242] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7242] write(1, "executing program\n", 18) = 18 [pid 7242] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7242] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7242] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7244 attached [pid 7244] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7242] <... clone3 resumed> => {parent_tid=[7244]}, 88) = 7244 [pid 7244] <... rseq resumed>) = 0 [pid 7242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7244] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7242] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] rt_sigprocmask(SIG_SETMASK, [], [pid 7242] <... futex resumed>) = 0 [pid 7244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7242] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7244] memfd_create("syzkaller", 0) = 3 [pid 7244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./21/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./21") = 0 [pid 5244] mkdir("./22", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7245 attached , child_tidptr=0x55558b77b750) = 7245 [pid 7245] set_robust_list(0x55558b77b760, 24) = 0 [pid 7245] chdir("./22") = 0 [pid 7245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7245] setpgid(0, 0) = 0 [pid 7245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7245] write(3, "1000", 4 [pid 5243] <... umount2 resumed>) = 0 [pid 7245] <... write resumed>) = 4 [pid 7245] close(3) = 0 [pid 7245] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7245] write(1, "executing program\n", 18 [pid 5243] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7245] <... write resumed>) = 18 [pid 7245] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7245] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./21/file0", [pid 7245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7245] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7245] <... mprotect resumed>) = 0 [pid 7245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7246 attached [pid 7246] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7245] <... clone3 resumed> => {parent_tid=[7246]}, 88) = 7246 [pid 7246] <... rseq resumed>) = 0 [pid 7245] rt_sigprocmask(SIG_SETMASK, [], [pid 7246] set_robust_list(0x7f511f03f9a0, 24 [pid 7245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7246] <... set_robust_list resumed>) = 0 [pid 7245] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] rt_sigprocmask(SIG_SETMASK, [], [pid 7245] <... futex resumed>) = 0 [pid 7246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7245] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7246] memfd_create("syzkaller", 0) = 3 [pid 7246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./21/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./21") = 0 [pid 5243] mkdir("./22", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7247 attached [pid 7247] set_robust_list(0x55558b77b760, 24 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 7247 [pid 7247] <... set_robust_list resumed>) = 0 [pid 7247] chdir("./22") = 0 [pid 7247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7247] setpgid(0, 0) = 0 [pid 7247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7247] write(3, "1000", 4) = 4 [pid 7247] close(3) = 0 [pid 7247] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7247] write(1, "executing program\n", 18 [pid 7243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7247] <... write resumed>) = 18 [pid 7247] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7219] <... write resumed>) = 16777216 [pid 7247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7219] munmap(0x7f5116c00000, 138412032 [pid 7247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7219] <... munmap resumed>) = 0 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7247] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7219] <... openat resumed>) = 4 [pid 7247] <... mprotect resumed>) = 0 [pid 7219] ioctl(4, LOOP_SET_FD, 3 [pid 7247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7219] <... ioctl resumed>) = 0 [pid 7247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7219] close(3./strace-static-x86_64: Process 7248 attached [pid 7244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7219] <... close resumed>) = 0 [pid 7248] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7247] <... clone3 resumed> => {parent_tid=[7248]}, 88) = 7248 [pid 7219] close(4 [pid 7247] rt_sigprocmask(SIG_SETMASK, [], [pid 7219] <... close resumed>) = 0 [pid 7219] mkdir("./file0", 0777 [pid 7247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7247] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7219] <... mkdir resumed>) = 0 [pid 7247] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7248] <... rseq resumed>) = 0 [pid 7219] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 162.954954][ T7219] loop2: detected capacity change from 0 to 32768 [pid 7248] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7248] memfd_create("syzkaller", 0) = 3 [pid 7248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 162.997933][ T7219] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7219) [ 163.072901][ T7219] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 163.102682][ T7219] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 163.128323][ T7219] BTRFS info (device loop2): using free-space-tree [pid 7246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7219] <... mount resumed>) = 0 [pid 7219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7219] chdir("./file0") = 0 [pid 7219] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7219] ioctl(4, LOOP_CLR_FD) = 0 [pid 7219] close(4) = 0 [pid 7219] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7219] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7204] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7219] <... openat resumed>) = 4 [pid 7204] <... futex resumed>) = 0 [pid 7204] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7219] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7204] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7204] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7219] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7219] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7204] <... futex resumed>) = 0 [pid 7219] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7204] exit_group(0 [pid 7219] <... futex resumed>) = ? [pid 7204] <... exit_group resumed>) = ? [pid 7219] +++ exited with 0 +++ [pid 7204] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7204, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=26 /* 0.26 s */} --- [pid 7244] <... write resumed>) = 16777216 [pid 5242] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./22/binderfs" [pid 7244] munmap(0x7f5116c00000, 138412032 [pid 5242] <... unlink resumed>) = 0 [pid 5242] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7244] <... munmap resumed>) = 0 [pid 7244] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7244] ioctl(4, LOOP_SET_FD, 3 [pid 7243] <... write resumed>) = 16777216 [pid 7244] <... ioctl resumed>) = 0 [pid 7243] munmap(0x7f5116c00000, 138412032 [pid 7244] close(3 [pid 7243] <... munmap resumed>) = 0 [pid 7244] <... close resumed>) = 0 [pid 7244] close(4 [pid 7243] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7244] <... close resumed>) = 0 [pid 7244] mkdir("./file0", 0777) = 0 [pid 7244] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7243] <... openat resumed>) = 4 [ 163.313399][ T7244] loop0: detected capacity change from 0 to 32768 [ 163.315313][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7243] close(3) = 0 [pid 7243] close(4) = 0 [pid 7243] mkdir("./file0", 0777) = 0 [ 163.368341][ T7243] loop1: detected capacity change from 0 to 32768 [ 163.374936][ T7244] BTRFS: device /dev/loop0 (7:0) using temp-fsid 39176377-f09b-4247-ab0a-d837158106b7 [ 163.388582][ T7244] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7244) [ 163.422894][ T7243] BTRFS: device /dev/loop1 (7:1) using temp-fsid dbb4b44a-122b-49fb-9866-c5536d330dc6 [ 163.432514][ T7243] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7243) [ 163.462636][ T7244] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7243] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 163.484244][ T7244] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 163.503380][ T7244] BTRFS info (device loop0): using free-space-tree [ 163.546371][ T7243] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7246] <... write resumed>) = 16777216 [pid 7246] munmap(0x7f5116c00000, 138412032) = 0 [ 163.602757][ T7243] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 7246] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7246] ioctl(4, LOOP_SET_FD, 3) = 0 [ 163.658754][ T7243] BTRFS info (device loop1): using free-space-tree [ 163.683417][ T7246] loop4: detected capacity change from 0 to 32768 [pid 7246] close(3 [pid 7244] <... mount resumed>) = 0 [pid 7244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7244] chdir("./file0") = 0 [pid 7244] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7244] ioctl(4, LOOP_CLR_FD) = 0 [pid 7244] close(4) = 0 [pid 7244] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7242] <... futex resumed>) = 0 [pid 7246] <... close resumed>) = 0 [pid 7244] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7242] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] close(4 [pid 7244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7242] <... futex resumed>) = 0 [pid 7246] <... close resumed>) = 0 [pid 7244] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7242] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7244] <... openat resumed>) = 4 [pid 7244] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] mkdir("./file0", 0777 [pid 7244] <... futex resumed>) = 1 [pid 7242] <... futex resumed>) = 0 [pid 7246] <... mkdir resumed>) = 0 [pid 7244] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7242] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7242] <... futex resumed>) = 0 [pid 7244] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7242] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7248] <... write resumed>) = 16777216 [pid 7244] <... fallocate resumed>) = 0 [pid 7248] munmap(0x7f5116c00000, 138412032 [pid 7244] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5242] <... umount2 resumed>) = 0 [pid 7244] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7242] <... futex resumed>) = 0 [pid 5242] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./22/file0", [pid 7248] <... munmap resumed>) = 0 [pid 7242] exit_group(0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7242] <... exit_group resumed>) = ? [pid 5242] <... openat resumed>) = 4 [pid 5242] newfstatat(4, "", [pid 7248] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7244] <... futex resumed>) = ? [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, [pid 7244] +++ exited with 0 +++ [pid 7242] +++ exited with 0 +++ [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7242, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [ 163.774916][ T7246] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7246) [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 7248] <... openat resumed>) = 4 [pid 5242] getdents64(4, [pid 5240] <... restart_syscall resumed>) = 0 [pid 5240] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] unlink("./21/binderfs") = 0 [pid 5242] close(4) = 0 [pid 5240] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7248] ioctl(4, LOOP_SET_FD, 3 [pid 5242] rmdir("./22/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [ 163.827472][ T7246] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 163.848078][ T7248] loop3: detected capacity change from 0 to 32768 [pid 5242] close(3) = 0 [pid 5242] rmdir("./22" [pid 7248] <... ioctl resumed>) = 0 [pid 7243] <... mount resumed>) = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 7248] close(3) = 0 [pid 7248] close(4) = 0 [pid 7248] mkdir("./file0", 0777) = 0 [pid 5242] mkdir("./23", 0777 [pid 7248] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5242] <... mkdir resumed>) = 0 [pid 7243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7243] chdir("./file0") = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7243] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5242] <... openat resumed>) = 3 [pid 7243] <... openat resumed>) = 4 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3 [pid 7243] ioctl(4, LOOP_CLR_FD [pid 5242] <... close resumed>) = 0 [pid 7243] <... ioctl resumed>) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7243] close(4 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 7300 [pid 7243] <... close resumed>) = 0 [pid 7243] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7241] <... futex resumed>) = 0 [pid 7241] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7243] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7241] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7300 attached [pid 7243] <... openat resumed>) = 4 [pid 7241] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7300] set_robust_list(0x55558b77b760, 24) = 0 [pid 7300] chdir("./23") = 0 [pid 7300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7300] setpgid(0, 0) = 0 [pid 7300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7243] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7241] <... futex resumed>) = 0 [pid 7243] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7241] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7300] <... openat resumed>) = 3 [pid 7243] <... fallocate resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7243] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7243] <... futex resumed>) = 0 [pid 7241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7300] write(3, "1000", 4 [pid 7241] exit_group(0 [pid 7243] ???( [pid 7241] <... exit_group resumed>) = ? [pid 7243] <... ??? resumed>) = ? [pid 7300] <... write resumed>) = 4 [pid 7243] +++ exited with 0 +++ [pid 7241] +++ exited with 0 +++ [pid 7300] close(3) = 0 [pid 7300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7241, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 7300] write(1, "executing program\n", 18executing program ) = 18 [pid 5241] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 163.868932][ T5240] BTRFS info (device loop0): last unmount of filesystem 39176377-f09b-4247-ab0a-d837158106b7 [ 163.882546][ T7246] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 163.891528][ T7246] BTRFS info (device loop4): using free-space-tree [ 163.901460][ T7248] BTRFS: device /dev/loop3 (7:3) using temp-fsid 55102908-2563-477c-b2ad-e2ce86746451 [pid 7300] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7300] <... futex resumed>) = 0 [pid 7300] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5241] <... openat resumed>) = 3 [pid 7300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] newfstatat(3, "", [pid 7300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7300] <... mmap resumed>) = 0x7f511f01f000 [pid 5241] getdents64(3, [pid 7300] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7300] <... mprotect resumed>) = 0 [pid 5241] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5241] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7304 attached [pid 7300] <... clone3 resumed> => {parent_tid=[7304]}, 88) = 7304 [pid 5241] unlink("./21/binderfs" [pid 7300] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] <... unlink resumed>) = 0 [pid 7300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7300] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7300] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7304] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7304] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7304] memfd_create("syzkaller", 0) = 3 [pid 7304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 163.958141][ T7248] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7248) [ 163.994368][ T7248] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 164.029570][ T7248] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 164.031139][ T5241] BTRFS info (device loop1): last unmount of filesystem dbb4b44a-122b-49fb-9866-c5536d330dc6 [ 164.053409][ T7248] BTRFS info (device loop3): using free-space-tree [pid 7246] <... mount resumed>) = 0 [pid 7246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7246] chdir("./file0") = 0 [pid 7246] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7246] ioctl(4, LOOP_CLR_FD) = 0 [pid 7246] close(4) = 0 [pid 7246] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] <... futex resumed>) = 0 [pid 7246] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7245] <... futex resumed>) = 0 [pid 7246] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7245] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7246] <... openat resumed>) = 4 [pid 7246] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] <... futex resumed>) = 0 [pid 7245] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7246] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7245] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7246] <... fallocate resumed>) = 0 [pid 7246] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] <... futex resumed>) = 0 [pid 7246] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] exit_group(0 [pid 7246] <... futex resumed>) = ? [pid 7245] <... exit_group resumed>) = ? [pid 7246] +++ exited with 0 +++ [pid 7245] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7245, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=27 /* 0.27 s */} --- [pid 5244] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5244] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./22/binderfs") = 0 [pid 5244] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 164.231985][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7248] <... mount resumed>) = 0 [pid 7248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7248] chdir("./file0") = 0 [pid 7248] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7248] ioctl(4, LOOP_CLR_FD) = 0 [pid 7248] close(4) = 0 [pid 7248] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7248] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 7248] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7248] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7247] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7248] <... fallocate resumed>) = 0 [pid 7248] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7247] exit_group(0) = ? [pid 7248] +++ exited with 0 +++ [pid 7247] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7247, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5243] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./22/binderfs") = 0 [pid 5243] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./21/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./21") = 0 [pid 5240] mkdir("./22", 0777) = 0 [pid 5241] <... umount2 resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5241] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 7331 [pid 5241] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 164.431608][ T5243] BTRFS info (device loop3): last unmount of filesystem 55102908-2563-477c-b2ad-e2ce86746451 [pid 5241] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7331 attached [pid 7331] set_robust_list(0x55558b77b760, 24) = 0 [pid 7331] chdir("./22") = 0 [pid 7331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7331] setpgid(0, 0) = 0 [pid 7331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7331] write(3, "1000", 4 [pid 5241] <... openat resumed>) = 4 [pid 5241] newfstatat(4, "", [pid 7331] <... write resumed>) = 4 [pid 7331] close(3 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7331] <... close resumed>) = 0 [pid 5241] getdents64(4, [pid 7331] symlink("/dev/binderfs", "./binderfs" [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7331] <... symlink resumed>) = 0 [pid 5241] getdents64(4, executing program 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7331] write(1, "executing program\n", 18 [pid 5241] close(4 [pid 7331] <... write resumed>) = 18 [pid 7331] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5241] <... close resumed>) = 0 [pid 7331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5241] rmdir("./21/file0" [pid 7331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7331] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5241] <... rmdir resumed>) = 0 [pid 7331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7332 attached => {parent_tid=[7332]}, 88) = 7332 [pid 5241] getdents64(3, [pid 7331] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7331] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7332] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5241] close(3 [pid 7332] <... rseq resumed>) = 0 [pid 5241] <... close resumed>) = 0 [pid 5241] rmdir("./21" [pid 7332] set_robust_list(0x7f511f03f9a0, 24 [pid 5241] <... rmdir resumed>) = 0 [pid 7332] <... set_robust_list resumed>) = 0 [pid 7332] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] mkdir("./22", 0777 [pid 7332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] <... mkdir resumed>) = 0 [pid 7332] memfd_create("syzkaller", 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7332] <... memfd_create resumed>) = 3 [pid 7332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5241] <... openat resumed>) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD [pid 7332] <... mmap resumed>) = 0x7f5116c00000 [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7333 attached , child_tidptr=0x55558b77b750) = 7333 [pid 7333] set_robust_list(0x55558b77b760, 24) = 0 [pid 7333] chdir("./22") = 0 [pid 7333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7333] setpgid(0, 0) = 0 [pid 7333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7333] write(3, "1000", 4) = 4 [pid 7333] close(3) = 0 [pid 7333] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7333] write(1, "executing program\n", 18) = 18 [pid 7333] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7333] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7333] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7334 attached => {parent_tid=[7334]}, 88) = 7334 [pid 7334] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7334] <... rseq resumed>) = 0 [pid 7333] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] set_robust_list(0x7f511f03f9a0, 24 [pid 7333] <... futex resumed>) = 0 [pid 7334] <... set_robust_list resumed>) = 0 [pid 7333] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7334] memfd_create("syzkaller", 0) = 3 [pid 7334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5244] <... umount2 resumed>) = 0 [pid 5244] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7304] <... write resumed>) = 16777216 [pid 5244] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] newfstatat(4, "", [pid 7304] munmap(0x7f5116c00000, 138412032) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 7304] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7304] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5244] rmdir("./22/file0") = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] close(3) = 0 [pid 5244] rmdir("./22") = 0 [pid 7304] close(3 [pid 5244] mkdir("./23", 0777 [pid 5243] <... umount2 resumed>) = 0 [pid 7304] <... close resumed>) = 0 [pid 7304] close(4) = 0 [pid 7304] mkdir("./file0", 0777 [pid 5244] <... mkdir resumed>) = 0 [ 164.693598][ T7304] loop2: detected capacity change from 0 to 32768 [pid 7304] <... mkdir resumed>) = 0 [pid 7304] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... openat resumed>) = 3 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5243] newfstatat(AT_FDCWD, "./22/file0", [pid 5244] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5244] close(3 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] <... close resumed>) = 0 [pid 5243] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7335 attached [pid 7335] set_robust_list(0x55558b77b760, 24 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7335 [pid 5243] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7335] <... set_robust_list resumed>) = 0 [pid 5243] <... openat resumed>) = 4 [pid 7335] chdir("./23" [pid 5243] newfstatat(4, "", [pid 7335] <... chdir resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7335] prctl(PR_SET_PDEATHSIG, SIGKILL [ 164.734008][ T7304] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7304) [pid 5243] getdents64(4, [pid 7335] <... prctl resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7335] setpgid(0, 0 [pid 5243] getdents64(4, [pid 7335] <... setpgid resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] close(4 [pid 7335] <... openat resumed>) = 3 [pid 5243] <... close resumed>) = 0 [pid 5243] rmdir("./22/file0" [pid 7335] write(3, "1000", 4) = 4 [pid 7335] close(3) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 7335] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5243] getdents64(3, [pid 7335] write(1, "executing program\n", 18) = 18 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3 [pid 7335] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... close resumed>) = 0 [pid 7335] <... futex resumed>) = 0 [pid 5243] rmdir("./22" [pid 7335] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 5243] <... rmdir resumed>) = 0 [pid 7335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] mkdir("./23", 0777 [pid 7335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] <... mkdir resumed>) = 0 [pid 7335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 164.786337][ T7304] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 164.823869][ T7304] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7335] <... mmap resumed>) = 0x7f511f01f000 [pid 5243] <... openat resumed>) = 3 [pid 7335] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] ioctl(3, LOOP_CLR_FD [pid 7335] <... mprotect resumed>) = 0 [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] close(3 [pid 7335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5243] <... close resumed>) = 0 [pid 7335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7338 attached [pid 7338] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7335] <... clone3 resumed> => {parent_tid=[7338]}, 88) = 7338 ./strace-static-x86_64: Process 7339 attached [pid 7339] set_robust_list(0x55558b77b760, 24) = 0 [pid 7339] chdir("./23") = 0 [pid 7339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7338] <... rseq resumed>) = 0 [pid 7335] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 7339 [pid 7339] <... prctl resumed>) = 0 [pid 7335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7339] setpgid(0, 0 [pid 7338] set_robust_list(0x7f511f03f9a0, 24 [pid 7339] <... setpgid resumed>) = 0 [pid 7338] <... set_robust_list resumed>) = 0 [pid 7338] rt_sigprocmask(SIG_SETMASK, [], [pid 7339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7335] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7339] <... openat resumed>) = 3 [pid 7335] <... futex resumed>) = 0 [pid 7339] write(3, "1000", 4 [pid 7338] memfd_create("syzkaller", 0 [pid 7335] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7339] <... write resumed>) = 4 [pid 7338] <... memfd_create resumed>) = 3 [pid 7339] close(3) = 0 executing program [pid 7339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7339] write(1, "executing program\n", 18) = 18 [pid 7338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7339] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7338] <... mmap resumed>) = 0x7f5116c00000 [pid 7339] <... futex resumed>) = 0 [pid 7339] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7339] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[7352]}, 88) = 7352 ./strace-static-x86_64: Process 7352 attached [ 164.844919][ T7304] BTRFS info (device loop2): using free-space-tree [pid 7339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7339] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7339] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7352] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7352] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7352] memfd_create("syzkaller", 0) = 3 [pid 7352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7304] <... mount resumed>) = 0 [pid 7304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7304] chdir("./file0") = 0 [pid 7304] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7304] ioctl(4, LOOP_CLR_FD) = 0 [pid 7304] close(4) = 0 [pid 7304] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7300] <... futex resumed>) = 0 [pid 7304] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7300] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7300] <... futex resumed>) = 0 [pid 7304] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7300] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7304] <... openat resumed>) = 4 [pid 7304] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7300] <... futex resumed>) = 0 [pid 7300] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7304] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7300] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7304] <... fallocate resumed>) = 0 [pid 7304] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7300] <... futex resumed>) = 0 [pid 7300] exit_group(0) = ? [pid 7304] +++ exited with 0 +++ [pid 7300] +++ exited with 0 +++ [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7300, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=33 /* 0.33 s */} --- [pid 5242] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5242] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./23/binderfs") = 0 [pid 5242] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 165.113292][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./23/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./23") = 0 [pid 5242] mkdir("./24", 0777) = 0 [pid 7338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7356 attached , child_tidptr=0x55558b77b750) = 7356 [pid 7356] set_robust_list(0x55558b77b760, 24) = 0 [pid 7356] chdir("./24") = 0 [pid 7356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7356] setpgid(0, 0) = 0 [pid 7356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7356] write(3, "1000", 4) = 4 [pid 7356] close(3) = 0 [pid 7356] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7356] write(1, "executing program\n", 18 [pid 7352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7356] <... write resumed>) = 18 [pid 7332] <... write resumed>) = 16777216 [pid 7356] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7356] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7332] munmap(0x7f5116c00000, 138412032 [pid 7356] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7357 attached => {parent_tid=[7357]}, 88) = 7357 [pid 7356] rt_sigprocmask(SIG_SETMASK, [], [pid 7357] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7357] <... rseq resumed>) = 0 [pid 7356] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7357] set_robust_list(0x7f511f03f9a0, 24 [pid 7356] <... futex resumed>) = 0 [pid 7357] <... set_robust_list resumed>) = 0 [pid 7357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7357] memfd_create("syzkaller", 0 [pid 7356] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7332] <... munmap resumed>) = 0 [pid 7357] <... memfd_create resumed>) = 3 [pid 7357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7332] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7334] <... write resumed>) = 16777216 [pid 7332] close(3 [pid 7334] munmap(0x7f5116c00000, 138412032 [pid 7332] <... close resumed>) = 0 [pid 7332] close(4) = 0 [pid 7332] mkdir("./file0", 0777 [pid 7334] <... munmap resumed>) = 0 [pid 7332] <... mkdir resumed>) = 0 [pid 7334] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7332] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7334] <... openat resumed>) = 4 [ 165.529835][ T7332] loop0: detected capacity change from 0 to 32768 [pid 7334] ioctl(4, LOOP_SET_FD, 3) = 0 [ 165.580472][ T7332] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7332) [ 165.595657][ T7334] loop1: detected capacity change from 0 to 32768 [pid 7334] close(3) = 0 [pid 7334] close(4) = 0 [pid 7334] mkdir("./file0", 0777) = 0 [ 165.665127][ T7332] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 165.676873][ T7334] BTRFS: device /dev/loop1 (7:1) using temp-fsid 548faa7f-edb8-468e-a5f5-8cf67a25696d [ 165.692844][ T7332] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 7334] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7338] <... write resumed>) = 16777216 [ 165.714964][ T7334] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7334) [ 165.746062][ T7332] BTRFS info (device loop0): using free-space-tree [pid 7338] munmap(0x7f5116c00000, 138412032) = 0 [ 165.779539][ T7334] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7338] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7338] ioctl(4, LOOP_SET_FD, 3) = 0 [ 165.832364][ T7334] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.843794][ T7338] loop4: detected capacity change from 0 to 32768 [pid 7338] close(3) = 0 [pid 7338] close(4) = 0 [pid 7338] mkdir("./file0", 0777) = 0 [pid 7338] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7352] <... write resumed>) = 16777216 [pid 7352] munmap(0x7f5116c00000, 138412032 [ 165.882917][ T7334] BTRFS info (device loop1): using free-space-tree [ 165.905789][ T7338] BTRFS: device /dev/loop4 (7:4) using temp-fsid 0c6ad3d4-b98d-464c-b2fe-d80c03d55491 [pid 7357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7352] <... munmap resumed>) = 0 [pid 7352] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7352] ioctl(4, LOOP_SET_FD, 3) = 0 [ 165.938535][ T7338] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7338) [ 165.967527][ T7352] loop3: detected capacity change from 0 to 32768 [pid 7352] close(3) = 0 [pid 7352] close(4) = 0 [pid 7352] mkdir("./file0", 0777) = 0 [ 165.992407][ T7338] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 166.012449][ T7352] BTRFS: device /dev/loop3 (7:3) using temp-fsid 3ba9fb16-6df3-42c0-b4b3-332fa4109561 [pid 7352] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7334] <... mount resumed>) = 0 [pid 7332] <... mount resumed>) = 0 [pid 7334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7334] <... openat resumed>) = 3 [pid 7332] chdir("./file0") = 0 [pid 7332] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7332] ioctl(4, LOOP_CLR_FD) = 0 [pid 7332] close(4) = 0 [pid 7332] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7331] <... futex resumed>) = 0 [pid 7332] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7331] <... futex resumed>) = 0 [pid 7332] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7331] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7332] <... openat resumed>) = 4 [ 166.045221][ T7338] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 166.065209][ T7352] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7352) [pid 7332] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7334] chdir("./file0" [pid 7331] <... futex resumed>) = 0 [pid 7331] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7334] <... chdir resumed>) = 0 [pid 7332] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7334] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7332] <... fallocate resumed>) = 0 [pid 7334] <... openat resumed>) = 4 [pid 7332] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7331] <... futex resumed>) = 0 [pid 7334] ioctl(4, LOOP_CLR_FD [pid 7331] exit_group(0 [pid 7334] <... ioctl resumed>) = 0 [pid 7331] <... exit_group resumed>) = ? [pid 7334] close(4 [pid 7332] +++ exited with 0 +++ [pid 7331] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7331, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=25 /* 0.25 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...> [pid 7334] <... close resumed>) = 0 [pid 7334] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7333] <... futex resumed>) = 0 [pid 7334] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7333] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] <... openat resumed>) = 4 [pid 7333] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... restart_syscall resumed>) = 0 [pid 5240] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7334] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] getdents64(3, [pid 7334] <... futex resumed>) = 1 [pid 7333] <... futex resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7334] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7333] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7333] <... futex resumed>) = 0 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7334] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7333] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] newfstatat(AT_FDCWD, "./22/binderfs", [pid 7334] <... fallocate resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./22/binderfs") = 0 [pid 7334] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7334] <... futex resumed>) = 1 [pid 7333] <... futex resumed>) = 0 [pid 7334] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7333] exit_group(0 [pid 7334] <... futex resumed>) = ? [pid 7333] <... exit_group resumed>) = ? [pid 7334] +++ exited with 0 +++ [pid 7333] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7333, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 166.097331][ T7338] BTRFS info (device loop4): using free-space-tree [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./22/binderfs") = 0 [ 166.170899][ T7352] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 166.234592][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 166.255291][ T7352] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 166.265239][ T5241] BTRFS info (device loop1): last unmount of filesystem 548faa7f-edb8-468e-a5f5-8cf67a25696d [pid 5241] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7357] <... write resumed>) = 16777216 [pid 7357] munmap(0x7f5116c00000, 138412032 [pid 7338] <... mount resumed>) = 0 [pid 7338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7338] chdir("./file0") = 0 [pid 7338] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7338] ioctl(4, LOOP_CLR_FD) = 0 [pid 7338] close(4 [pid 7357] <... munmap resumed>) = 0 [pid 7338] <... close resumed>) = 0 [pid 7357] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 166.307940][ T7352] BTRFS info (device loop3): using free-space-tree [pid 7338] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7357] <... openat resumed>) = 4 [pid 7338] <... futex resumed>) = 1 [pid 7335] <... futex resumed>) = 0 [pid 7335] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7357] ioctl(4, LOOP_SET_FD, 3 [pid 7338] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7335] <... futex resumed>) = 0 [pid 7338] <... openat resumed>) = 4 [pid 7335] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7338] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7335] <... futex resumed>) = 0 [pid 7338] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7335] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7338] <... futex resumed>) = 0 [pid 7335] <... futex resumed>) = 1 [pid 7338] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7338] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7338] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7335] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7357] <... ioctl resumed>) = 0 [pid 7335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7357] close(3 [pid 7335] exit_group(0 [pid 7357] <... close resumed>) = 0 [pid 7335] <... exit_group resumed>) = ? [ 166.356652][ T7357] loop2: detected capacity change from 0 to 32768 [pid 7357] close(4) = 0 [pid 7338] <... futex resumed>) = ? [pid 7357] mkdir("./file0", 0777 [pid 5240] <... umount2 resumed>) = 0 [pid 7338] +++ exited with 0 +++ [pid 7335] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7335, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5240] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./22/file0", [pid 7357] <... mkdir resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7357] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5240] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5244] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] newfstatat(4, "", [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] getdents64(4, [pid 5244] <... openat resumed>) = 3 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] newfstatat(3, "", [pid 5240] getdents64(4, [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./23/binderfs") = 0 [pid 5240] close(4 [pid 5244] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... close resumed>) = 0 [pid 5240] rmdir("./22/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./22" [pid 7352] <... mount resumed>) = 0 [pid 7352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] <... rmdir resumed>) = 0 [pid 7352] chdir("./file0" [pid 5240] mkdir("./23", 0777 [pid 7352] <... chdir resumed>) = 0 [pid 5240] <... mkdir resumed>) = 0 [ 166.438868][ T7357] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7357) [ 166.464598][ T7357] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7352] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7352] ioctl(4, LOOP_CLR_FD) = 0 [pid 7352] close(4) = 0 [pid 7352] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7423 attached [pid 7352] <... futex resumed>) = 1 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 7423 [pid 7352] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7339] <... futex resumed>) = 0 [pid 7423] set_robust_list(0x55558b77b760, 24) = 0 [pid 7339] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7423] chdir("./23" [pid 7352] <... futex resumed>) = 0 [pid 7352] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7339] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7423] <... chdir resumed>) = 0 [pid 7352] <... openat resumed>) = 4 [pid 7423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7352] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] <... prctl resumed>) = 0 [pid 7352] <... futex resumed>) = 1 [pid 7423] setpgid(0, 0 [pid 7352] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7339] <... futex resumed>) = 0 [pid 7339] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] <... setpgid resumed>) = 0 [pid 7352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7339] <... futex resumed>) = 0 [pid 7423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7352] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7339] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7352] <... fallocate resumed>) = 0 [pid 7352] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] <... openat resumed>) = 3 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7423] write(3, "1000", 4 [pid 7339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7423] <... write resumed>) = 4 [pid 7423] close(3) = 0 [pid 7339] exit_group(0 [pid 7352] <... futex resumed>) = ? [pid 7339] <... exit_group resumed>) = ? [ 166.482947][ T7357] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 166.503192][ T7357] BTRFS info (device loop2): using free-space-tree [ 166.526810][ T5244] BTRFS info (device loop4): last unmount of filesystem 0c6ad3d4-b98d-464c-b2fe-d80c03d55491 [pid 7352] +++ exited with 0 +++ [pid 7339] +++ exited with 0 +++ [pid 7423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7339, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 7423] write(1, "executing program\n", 18 [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 executing program [pid 7423] <... write resumed>) = 18 [pid 7423] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7423] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7423] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5243] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... openat resumed>) = 3 [pid 7423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] newfstatat(3, "", [pid 7423] <... mmap resumed>) = 0x7f511f01f000 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7423] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5243] getdents64(3, [pid 7423] <... mprotect resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7438 attached [pid 5243] newfstatat(AT_FDCWD, "./23/binderfs", [pid 7438] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7423] <... clone3 resumed> => {parent_tid=[7438]}, 88) = 7438 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./23/binderfs" [pid 7423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7423] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... unlink resumed>) = 0 [pid 7438] <... rseq resumed>) = 0 [pid 7438] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7438] memfd_create("syzkaller", 0 [pid 7423] <... futex resumed>) = 0 [pid 7438] <... memfd_create resumed>) = 3 [pid 7423] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5243] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7357] <... mount resumed>) = 0 [pid 5241] <... openat resumed>) = 4 [pid 5241] newfstatat(4, "", [pid 7357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7357] <... openat resumed>) = 3 [pid 5241] getdents64(4, [pid 7357] chdir("./file0" [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7357] <... chdir resumed>) = 0 [pid 5241] getdents64(4, [pid 7357] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7357] <... openat resumed>) = 4 [pid 7357] ioctl(4, LOOP_CLR_FD) = 0 [pid 7357] close(4) = 0 [pid 7357] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7356] <... futex resumed>) = 0 [pid 7357] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7356] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7357] <... openat resumed>) = 4 [pid 7356] <... futex resumed>) = 0 [pid 7356] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] close(4) = 0 [pid 5241] rmdir("./22/file0" [pid 7357] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... rmdir resumed>) = 0 [pid 5241] getdents64(3, [pid 7357] <... futex resumed>) = 1 [pid 7356] <... futex resumed>) = 0 [pid 7357] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7356] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7357] <... fallocate resumed>) = 0 [pid 7356] <... futex resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7357] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] close(3 [pid 7357] <... futex resumed>) = 0 [pid 7356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5241] <... close resumed>) = 0 [pid 7357] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7356] exit_group(0 [pid 7357] <... futex resumed>) = ? [pid 7356] <... exit_group resumed>) = ? [pid 7357] +++ exited with 0 +++ [pid 7356] +++ exited with 0 +++ [pid 5241] rmdir("./22" [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7356, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=19 /* 0.19 s */} --- [pid 5241] <... rmdir resumed>) = 0 [pid 5241] mkdir("./23", 0777 [pid 5242] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... mkdir resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5242] <... openat resumed>) = 3 [pid 5241] <... openat resumed>) = 3 [pid 5242] newfstatat(3, "", [pid 5241] ioctl(3, LOOP_CLR_FD [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] getdents64(3, [pid 5241] close(3 [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] <... close resumed>) = 0 [pid 5242] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7442 attached [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 7442 [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7442] set_robust_list(0x55558b77b760, 24 [ 166.714654][ T5243] BTRFS info (device loop3): last unmount of filesystem 3ba9fb16-6df3-42c0-b4b3-332fa4109561 [pid 5242] unlink("./24/binderfs") = 0 executing program [pid 7442] <... set_robust_list resumed>) = 0 [pid 5242] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7442] chdir("./23") = 0 [pid 7442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7442] setpgid(0, 0) = 0 [pid 7442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7442] write(3, "1000", 4) = 4 [pid 7442] close(3) = 0 [pid 7442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7442] write(1, "executing program\n", 18) = 18 [pid 7442] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7442] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7442] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[7443]}, 88) = 7443 [pid 7442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7443 attached [pid 7442] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7442] <... futex resumed>) = 0 [pid 7442] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7443] <... rseq resumed>) = 0 [pid 7443] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7443] memfd_create("syzkaller", 0) = 3 [pid 5243] <... umount2 resumed>) = 0 [ 166.807386][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5243] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7443] <... mmap resumed>) = 0x7f5116c00000 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./23/file0") = 0 [pid 5243] getdents64(3, [pid 5244] <... umount2 resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5244] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] rmdir("./23" [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] <... rmdir resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] mkdir("./24", 0777 [pid 5244] newfstatat(4, "", [pid 5243] <... mkdir resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./23/file0" [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5244] <... rmdir resumed>) = 0 [pid 5243] <... openat resumed>) = 3 [pid 5244] getdents64(3, [pid 5243] ioctl(3, LOOP_CLR_FD [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5243] close(3 [pid 5244] rmdir("./23" [pid 5243] <... close resumed>) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7444 attached [pid 5244] mkdir("./24", 0777) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 7444 [pid 5244] <... openat resumed>) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3 [pid 7444] set_robust_list(0x55558b77b760, 24 [pid 5244] <... close resumed>) = 0 [pid 7444] <... set_robust_list resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7445 attached [pid 7444] chdir("./24"executing program executing program [pid 7445] set_robust_list(0x55558b77b760, 24 [pid 7444] <... chdir resumed>) = 0 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7445 [pid 7445] <... set_robust_list resumed>) = 0 [pid 7444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7444] setpgid(0, 0 [pid 7445] chdir("./24" [pid 7444] <... setpgid resumed>) = 0 [pid 7444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7445] <... chdir resumed>) = 0 [pid 7445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7445] setpgid(0, 0 [pid 7444] <... openat resumed>) = 3 [pid 7445] <... setpgid resumed>) = 0 [pid 7444] write(3, "1000", 4 [pid 7445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7444] <... write resumed>) = 4 [pid 7444] close(3) = 0 [pid 7445] <... openat resumed>) = 3 [pid 7444] symlink("/dev/binderfs", "./binderfs" [pid 7445] write(3, "1000", 4 [pid 7444] <... symlink resumed>) = 0 [pid 7445] <... write resumed>) = 4 [pid 7444] write(1, "executing program\n", 18 [pid 7445] close(3 [pid 7444] <... write resumed>) = 18 [pid 7445] <... close resumed>) = 0 [pid 7444] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] symlink("/dev/binderfs", "./binderfs" [pid 7444] <... futex resumed>) = 0 [pid 7445] <... symlink resumed>) = 0 [pid 7444] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7445] write(1, "executing program\n", 18 [pid 7444] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7445] <... write resumed>) = 18 [pid 7444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7445] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7445] <... futex resumed>) = 0 [pid 7444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7445] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7444] <... mmap resumed>) = 0x7f511f01f000 [pid 7445] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7444] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7444] <... mprotect resumed>) = 0 [pid 7444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7445] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 7446 attached [pid 7445] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7444] <... clone3 resumed> => {parent_tid=[7446]}, 88) = 7446 [pid 7444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7444] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7444] <... futex resumed>) = 0 [pid 7445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7444] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7446] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7445] <... clone3 resumed> => {parent_tid=[7447]}, 88) = 7447 [pid 7446] <... rseq resumed>) = 0 [pid 7445] rt_sigprocmask(SIG_SETMASK, [], [pid 7446] set_robust_list(0x7f511f03f9a0, 24 [pid 7445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7445] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7446] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 7447 attached [pid 7446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7446] memfd_create("syzkaller", 0) = 3 [pid 7446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7447] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7447] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7447] memfd_create("syzkaller", 0) = 3 [pid 7447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5242] <... umount2 resumed>) = 0 [pid 5242] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./24/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./24") = 0 [pid 5242] mkdir("./25", 0777) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7448 ./strace-static-x86_64: Process 7448 attached [pid 7448] set_robust_list(0x55558b77b760, 24) = 0 executing program [pid 7448] chdir("./25") = 0 [pid 7448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7448] setpgid(0, 0) = 0 [pid 7448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7448] write(3, "1000", 4) = 4 [pid 7448] close(3) = 0 [pid 7448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7448] write(1, "executing program\n", 18) = 18 [pid 7448] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7448] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7449 attached => {parent_tid=[7449]}, 88) = 7449 [pid 7448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7448] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7449] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7449] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7449] memfd_create("syzkaller", 0) = 3 [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7438] <... write resumed>) = 16777216 [pid 7438] munmap(0x7f5116c00000, 138412032) = 0 [pid 7438] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7438] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7438] close(3) = 0 [pid 7438] close(4) = 0 [pid 7438] mkdir("./file0", 0777) = 0 [pid 7438] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 167.643456][ T7438] loop0: detected capacity change from 0 to 32768 [ 167.685805][ T7438] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7438) [ 167.760016][ T7438] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 167.787459][ T7438] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 7449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7443] <... write resumed>) = 16777216 [pid 7443] munmap(0x7f5116c00000, 138412032) = 0 [ 167.839189][ T7438] BTRFS info (device loop0): using free-space-tree [pid 7443] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7443] close(3) = 0 [pid 7443] close(4) = 0 [pid 7443] mkdir("./file0", 0777) = 0 [pid 7443] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7446] <... write resumed>) = 16777216 [ 167.881701][ T7443] loop1: detected capacity change from 0 to 32768 [ 167.909056][ T7443] BTRFS: device /dev/loop1 (7:1) using temp-fsid dcfab3e1-eb44-4292-9176-340bdc5d560d [pid 7447] <... write resumed>) = 16777216 [pid 7446] munmap(0x7f5116c00000, 138412032 [ 167.929428][ T7443] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7443) [pid 7447] munmap(0x7f5116c00000, 138412032) = 0 [pid 7447] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7447] ioctl(4, LOOP_SET_FD, 3 [pid 7449] <... write resumed>) = 16777216 [pid 7447] <... ioctl resumed>) = 0 [pid 7446] <... munmap resumed>) = 0 [pid 7447] close(3) = 0 [pid 7447] close(4) = 0 [pid 7447] mkdir("./file0", 0777) = 0 [pid 7449] munmap(0x7f5116c00000, 138412032 [pid 7447] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 168.014518][ T7447] loop4: detected capacity change from 0 to 32768 [ 168.021133][ T7443] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 168.035503][ T7443] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 168.045176][ T7443] BTRFS info (device loop1): using free-space-tree [pid 7446] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7446] ioctl(4, LOOP_SET_FD, 3 [pid 7449] <... munmap resumed>) = 0 [pid 7438] <... mount resumed>) = 0 [pid 7449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7446] <... ioctl resumed>) = 0 [pid 7438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7449] <... openat resumed>) = 4 [pid 7446] close(3 [pid 7438] <... openat resumed>) = 3 [pid 7449] ioctl(4, LOOP_SET_FD, 3 [pid 7446] <... close resumed>) = 0 [pid 7446] close(4) = 0 [pid 7438] chdir("./file0") = 0 [pid 7438] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7438] ioctl(4, LOOP_CLR_FD) = 0 [pid 7438] close(4 [pid 7446] mkdir("./file0", 0777 [pid 7438] <... close resumed>) = 0 [pid 7449] <... ioctl resumed>) = 0 [pid 7438] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7438] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7449] close(3 [pid 7423] <... futex resumed>) = 0 [pid 7449] <... close resumed>) = 0 [pid 7423] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [ 168.058084][ T7447] BTRFS: device /dev/loop4 (7:4) using temp-fsid 5a8bd06b-4504-498d-a3c8-09e8d09bcad1 [ 168.075063][ T7446] loop3: detected capacity change from 0 to 32768 [ 168.094323][ T7449] loop2: detected capacity change from 0 to 32768 [pid 7449] close(4 [pid 7446] <... mkdir resumed>) = 0 [pid 7438] <... futex resumed>) = 0 [pid 7423] <... futex resumed>) = 1 [pid 7449] <... close resumed>) = 0 [pid 7449] mkdir("./file0", 0777 [pid 7446] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7423] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7438] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7449] <... mkdir resumed>) = 0 [pid 7438] <... openat resumed>) = 4 [pid 7449] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7438] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7423] <... futex resumed>) = 0 [pid 7423] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7423] <... futex resumed>) = 0 [pid 7438] <... fallocate resumed>) = 0 [pid 7423] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7438] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7423] <... futex resumed>) = 0 [pid 7438] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7423] exit_group(0 [pid 7438] <... futex resumed>) = ? [pid 7423] <... exit_group resumed>) = ? [pid 7438] +++ exited with 0 +++ [pid 7423] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7423, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=33 /* 0.33 s */} --- [ 168.105974][ T7447] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7447) [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./23/binderfs") = 0 [ 168.196860][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 168.222840][ T7446] BTRFS: device /dev/loop3 (7:3) using temp-fsid 85f4f0d4-39f9-4e84-a728-60fd6b38afbf [ 168.235245][ T7447] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 168.265789][ T7446] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7446) [ 168.289618][ T7447] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 168.305827][ T7447] BTRFS info (device loop4): using free-space-tree [ 168.321072][ T7449] BTRFS: device /dev/loop2 (7:2) using temp-fsid e78ee4a5-7ccc-4f43-99e8-83b3d60e5b8f [ 168.337243][ T7446] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 168.337901][ T7449] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7449) [ 168.361608][ T7446] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 5240] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7443] <... mount resumed>) = 0 [pid 7443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7443] chdir("./file0") = 0 [ 168.371085][ T7446] BTRFS info (device loop3): using free-space-tree [ 168.394282][ T7449] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7443] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7443] ioctl(4, LOOP_CLR_FD) = 0 [pid 7443] close(4) = 0 [pid 7443] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7442] <... futex resumed>) = 0 [pid 7443] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7442] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] <... openat resumed>) = 4 [pid 7442] <... futex resumed>) = 0 [pid 7443] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7443] <... futex resumed>) = 0 [pid 7442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7443] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7442] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7443] <... fallocate resumed>) = 0 [pid 7442] <... futex resumed>) = 0 [pid 7443] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7443] <... futex resumed>) = 0 [pid 7442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7443] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7442] exit_group(0 [pid 7443] <... futex resumed>) = ? [pid 7442] <... exit_group resumed>) = ? [pid 7443] +++ exited with 0 +++ [pid 7442] +++ exited with 0 +++ [pid 7447] <... mount resumed>) = 0 [pid 7447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7447] chdir("./file0") = 0 [pid 7447] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7442, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=26 /* 0.26 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 7447] <... openat resumed>) = 4 [pid 5241] <... restart_syscall resumed>) = 0 [pid 7447] ioctl(4, LOOP_CLR_FD) = 0 [pid 7447] close(4) = 0 [pid 7447] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7447] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7445] <... futex resumed>) = 1 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7445] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7447] <... futex resumed>) = 0 [ 168.458206][ T7449] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 168.468397][ T7449] BTRFS info (device loop2): using free-space-tree [pid 7447] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 5241] <... openat resumed>) = 3 [pid 7447] <... openat resumed>) = 4 [pid 7447] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 5241] newfstatat(3, "", [pid 7447] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7445] <... futex resumed>) = 1 [pid 7447] <... futex resumed>) = 0 [pid 7445] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7447] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5241] getdents64(3, [pid 7447] <... fallocate resumed>) = 0 [pid 7447] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7447] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] <... futex resumed>) = 0 [pid 5241] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7445] exit_group(0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7445] <... exit_group resumed>) = ? [pid 5241] newfstatat(AT_FDCWD, "./23/binderfs", [pid 7447] <... futex resumed>) = ? [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7447] +++ exited with 0 +++ [pid 7445] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7445, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=21 /* 0.21 s */} --- [pid 5241] unlink("./23/binderfs") = 0 [pid 5241] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./24/binderfs") = 0 [ 168.580336][ T5241] BTRFS info (device loop1): last unmount of filesystem dcfab3e1-eb44-4292-9176-340bdc5d560d [pid 5244] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7446] <... mount resumed>) = 0 [pid 7446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7446] chdir("./file0") = 0 [pid 7446] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7446] ioctl(4, LOOP_CLR_FD) = 0 [pid 7446] close(4) = 0 [pid 7446] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7444] <... futex resumed>) = 0 [pid 7446] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7444] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] <... openat resumed>) = 4 [pid 7444] <... futex resumed>) = 0 [pid 7446] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] <... mount resumed>) = 0 [pid 7446] <... futex resumed>) = 0 [pid 7444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7446] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7444] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... openat resumed>) = 3 [pid 7446] <... fallocate resumed>) = 0 [pid 7444] <... futex resumed>) = 0 [pid 7444] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7446] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] chdir("./file0" [pid 7446] <... futex resumed>) = 1 [pid 7444] <... futex resumed>) = 0 [pid 7449] <... chdir resumed>) = 0 [pid 7446] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] <... umount2 resumed>) = 0 [ 168.671482][ T5244] BTRFS info (device loop4): last unmount of filesystem 5a8bd06b-4504-498d-a3c8-09e8d09bcad1 [pid 7449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7444] exit_group(0 [pid 5240] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7449] <... openat resumed>) = 4 [pid 7444] <... exit_group resumed>) = ? [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./23/file0", [pid 7449] ioctl(4, LOOP_CLR_FD [pid 7446] <... futex resumed>) = ? [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7449] <... ioctl resumed>) = 0 [pid 7446] +++ exited with 0 +++ [pid 7444] +++ exited with 0 +++ [pid 5240] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7449] close(4 [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7444, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7449] <... close resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7449] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... openat resumed>) = 4 [pid 7449] <... futex resumed>) = 1 [pid 5240] newfstatat(4, "", [pid 7448] <... futex resumed>) = 0 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7449] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7448] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] getdents64(4, [pid 7449] <... openat resumed>) = 4 [pid 7448] <... futex resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7448] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] getdents64(4, [pid 5243] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5240] close(4 [pid 5243] <... openat resumed>) = 3 [pid 5243] newfstatat(3, "", [pid 5240] <... close resumed>) = 0 [pid 7449] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] rmdir("./23/file0" [pid 7449] <... futex resumed>) = 1 [pid 7448] <... futex resumed>) = 0 [pid 5243] getdents64(3, [pid 5240] <... rmdir resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./24/binderfs" [pid 7449] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... unlink resumed>) = 0 [pid 5243] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7448] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... futex resumed>) = 0 [pid 7448] <... futex resumed>) = 1 [pid 5240] getdents64(3, [pid 7448] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7449] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 5240] close(3) = 0 [pid 7449] <... fallocate resumed>) = 0 [pid 5240] rmdir("./23" [pid 7449] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./24", 0777 [pid 7449] <... futex resumed>) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7448] exit_group(0) = ? [pid 5240] <... mkdir resumed>) = 0 [pid 7449] +++ exited with 0 +++ [pid 7448] +++ exited with 0 +++ [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5244] <... umount2 resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7448, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3 [pid 5244] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... close resumed>) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7532 attached [pid 5244] newfstatat(AT_FDCWD, "./24/file0", [pid 5242] <... openat resumed>) = 3 [pid 7532] set_robust_list(0x55558b77b760, 24) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] newfstatat(3, "", [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 7532 [pid 7532] chdir("./24" [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] getdents64(3, [pid 7532] <... chdir resumed>) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7532] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] <... openat resumed>) = 4 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7532] <... prctl resumed>) = 0 [pid 5244] newfstatat(4, "", [pid 5242] newfstatat(AT_FDCWD, "./25/binderfs", [pid 7532] setpgid(0, 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7532] <... setpgid resumed>) = 0 [pid 5244] getdents64(4, [pid 5242] unlink("./25/binderfs" [pid 7532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] <... unlink resumed>) = 0 [pid 5242] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] getdents64(4, [pid 7532] <... openat resumed>) = 3 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7532] write(3, "1000", 4 [pid 5244] close(4 [pid 7532] <... write resumed>) = 4 [ 168.817867][ T5243] BTRFS info (device loop3): last unmount of filesystem 85f4f0d4-39f9-4e84-a728-60fd6b38afbf [pid 7532] close(3) = 0 [pid 5244] <... close resumed>) = 0 [pid 7532] symlink("/dev/binderfs", "./binderfs" [pid 5244] rmdir("./24/file0"executing program [pid 7532] <... symlink resumed>) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5244] getdents64(3, [pid 7532] write(1, "executing program\n", 18) = 18 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7532] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] close(3 [pid 7532] <... futex resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 7532] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5244] rmdir("./24" [pid 7532] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 7532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] mkdir("./25", 0777) = 0 [pid 7532] <... mmap resumed>) = 0x7f511f01f000 [pid 7532] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7532] <... mprotect resumed>) = 0 [pid 5244] <... openat resumed>) = 3 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 7532] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(3 [pid 7532] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] <... close resumed>) = 0 [pid 5243] <... umount2 resumed>) = 0 [pid 7532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7532] <... clone3 resumed> => {parent_tid=[7535]}, 88) = 7535 [pid 5243] newfstatat(AT_FDCWD, "./24/file0", [pid 7532] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7532] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 7534 attached [pid 7532] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7535 attached ) = 0 [pid 5243] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7534] set_robust_list(0x55558b77b760, 24) = 0 [pid 7534] chdir("./25") = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7532] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7535] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7534 [pid 5243] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7535] <... rseq resumed>) = 0 [pid 7534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7535] set_robust_list(0x7f511f03f9a0, 24 [pid 5243] <... openat resumed>) = 4 [pid 7535] <... set_robust_list resumed>) = 0 [pid 5243] newfstatat(4, "", [pid 7535] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7534] <... prctl resumed>) = 0 [pid 7534] setpgid(0, 0) = 0 [pid 7535] memfd_create("syzkaller", 0 [pid 5243] getdents64(4, [pid 7535] <... memfd_create resumed>) = 3 [pid 7535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7535] <... mmap resumed>) = 0x7f5116c00000 [pid 7534] <... openat resumed>) = 3 [pid 5243] getdents64(4, [pid 7534] write(3, "1000", 4) = 4 [pid 7534] close(3) = 0 [pid 7534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 executing program [pid 7534] write(1, "executing program\n", 18 [pid 5243] rmdir("./24/file0" [pid 7534] <... write resumed>) = 18 [pid 7534] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7534] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7534] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[7536]}, 88) = 7536 [pid 7534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7534] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7534] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7536 attached [pid 7536] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7536] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7536] memfd_create("syzkaller", 0) = 3 [pid 7536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5243] <... rmdir resumed>) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [ 168.954224][ T5242] BTRFS info (device loop2): last unmount of filesystem e78ee4a5-7ccc-4f43-99e8-83b3d60e5b8f [pid 5243] rmdir("./24") = 0 [pid 5243] mkdir("./25", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7537 attached , child_tidptr=0x55558b77b750) = 7537 [pid 7537] set_robust_list(0x55558b77b760, 24) = 0 [pid 7537] chdir("./25" [pid 5242] <... umount2 resumed>) = 0 [pid 7537] <... chdir resumed>) = 0 [pid 7537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7537] setpgid(0, 0) = 0 [pid 7537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7537] write(3, "1000", 4 [pid 5242] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 5242] newfstatat(AT_FDCWD, "./25/file0", [pid 7537] <... write resumed>) = 4 [pid 7537] close(3 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7537] <... close resumed>) = 0 [pid 7537] symlink("/dev/binderfs", "./binderfs" [pid 5242] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7537] <... symlink resumed>) = 0 [pid 5242] <... openat resumed>) = 4 [pid 7537] write(1, "executing program\n", 18) = 18 [pid 5242] newfstatat(4, "", [pid 7537] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7537] <... futex resumed>) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7537] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./25/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5242] rmdir("./25") = 0 [pid 5242] mkdir("./26", 0777 [pid 7537] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5242] <... mkdir resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 7537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] <... ioctl resumed>) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7537] <... mmap resumed>) = 0x7f511f01f000 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 7538 ./strace-static-x86_64: Process 7538 attached [pid 7538] set_robust_list(0x55558b77b760, 24) = 0 [pid 7538] chdir("./26") = 0 [pid 7538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7538] setpgid(0, 0) = 0 [pid 7538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7537] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 executing program [pid 7538] write(3, "1000", 4 [pid 7537] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7538] <... write resumed>) = 4 [pid 7538] close(3) = 0 [pid 7538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7538] write(1, "executing program\n", 18) = 18 [pid 7538] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5241] <... umount2 resumed>) = 0 [pid 7538] <... futex resumed>) = 0 [pid 7538] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7538] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7538] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5241] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7538] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7539 attached [pid 7537] <... clone3 resumed> => {parent_tid=[7539]}, 88) = 7539 [pid 7539] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5241] newfstatat(AT_FDCWD, "./23/file0", [pid 7539] <... rseq resumed>) = 0 [pid 7538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7537] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7539] set_robust_list(0x7f511f03f9a0, 24 [pid 7537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7538] <... clone3 resumed> => {parent_tid=[7540]}, 88) = 7540 [pid 7537] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7539] <... set_robust_list resumed>) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7537] <... futex resumed>) = 0 [pid 7539] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7537] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5241] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7540 attached [pid 7538] rt_sigprocmask(SIG_SETMASK, [], [pid 5241] newfstatat(4, "", [pid 7538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7538] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7539] memfd_create("syzkaller", 0 [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7540] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7538] <... futex resumed>) = 0 [pid 7540] <... rseq resumed>) = 0 [pid 7538] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7540] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7539] <... memfd_create resumed>) = 3 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, [pid 7540] rt_sigprocmask(SIG_SETMASK, [], [pid 7539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7540] memfd_create("syzkaller", 0 [pid 7539] <... mmap resumed>) = 0x7f5116c00000 [pid 5241] close(4) = 0 [pid 5241] rmdir("./23/file0" [pid 7540] <... memfd_create resumed>) = 3 [pid 7540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5241] <... rmdir resumed>) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./23") = 0 [pid 5241] mkdir("./24", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7541 ./strace-static-x86_64: Process 7541 attached [pid 7541] set_robust_list(0x55558b77b760, 24) = 0 [pid 7541] chdir("./24") = 0 [pid 7541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7541] setpgid(0, 0) = 0 [pid 7541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7541] write(3, "1000", 4) = 4 executing program [pid 7541] close(3) = 0 [pid 7541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7541] write(1, "executing program\n", 18) = 18 [pid 7541] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7541] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7541] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7542 attached => {parent_tid=[7542]}, 88) = 7542 [pid 7541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7541] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7541] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7542] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7542] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7542] memfd_create("syzkaller", 0) = 3 [pid 7542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7536] <... write resumed>) = 16777216 [pid 7535] <... write resumed>) = 16777216 [pid 7536] munmap(0x7f5116c00000, 138412032 [pid 7535] munmap(0x7f5116c00000, 138412032 [pid 7536] <... munmap resumed>) = 0 [pid 7535] <... munmap resumed>) = 0 [pid 7535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7536] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7535] <... openat resumed>) = 4 [pid 7536] ioctl(4, LOOP_SET_FD, 3 [pid 7535] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7536] <... ioctl resumed>) = 0 [pid 7535] close(3 [pid 7536] close(3 [pid 7535] <... close resumed>) = 0 [pid 7536] <... close resumed>) = 0 [pid 7535] close(4 [pid 7536] close(4 [pid 7539] <... write resumed>) = 16777216 [pid 7536] <... close resumed>) = 0 [pid 7535] <... close resumed>) = 0 [pid 7539] munmap(0x7f5116c00000, 138412032 [pid 7536] mkdir("./file0", 0777 [pid 7535] mkdir("./file0", 0777 [pid 7536] <... mkdir resumed>) = 0 [pid 7536] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7535] <... mkdir resumed>) = 0 [pid 7535] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7539] <... munmap resumed>) = 0 [pid 7540] <... write resumed>) = 16777216 [ 170.011990][ T7535] loop0: detected capacity change from 0 to 32768 [ 170.018805][ T7536] loop4: detected capacity change from 0 to 32768 [ 170.045733][ T7536] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7536) [pid 7539] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7540] munmap(0x7f5116c00000, 138412032 [pid 7539] <... openat resumed>) = 4 [pid 7540] <... munmap resumed>) = 0 [pid 7539] ioctl(4, LOOP_SET_FD, 3 [pid 7540] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7540] ioctl(4, LOOP_SET_FD, 3 [pid 7539] <... ioctl resumed>) = 0 [pid 7539] close(3) = 0 [pid 7539] close(4) = 0 [pid 7539] mkdir("./file0", 0777 [pid 7540] <... ioctl resumed>) = 0 [pid 7539] <... mkdir resumed>) = 0 [pid 7540] close(3) = 0 [pid 7540] close(4) = 0 [ 170.079941][ T7539] loop3: detected capacity change from 0 to 32768 [ 170.087378][ T7540] loop2: detected capacity change from 0 to 32768 [ 170.100253][ T7535] BTRFS: device /dev/loop0 (7:0) using temp-fsid da99db68-907c-4105-bad2-b479419ad9b3 [ 170.110655][ T7536] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7540] mkdir("./file0", 0777) = 0 [pid 7540] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7539] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7542] <... write resumed>) = 16777216 [ 170.120901][ T7535] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7535) [ 170.143177][ T7536] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 170.154009][ T7540] BTRFS: device /dev/loop2 (7:2) using temp-fsid dfb8a9a7-9ded-4bf4-bfc1-5c3b66fba772 [ 170.165048][ T7540] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7540) [pid 7542] munmap(0x7f5116c00000, 138412032) = 0 [pid 7542] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 170.166050][ T7535] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 170.180236][ T7536] BTRFS info (device loop4): using free-space-tree [ 170.206529][ T7542] loop1: detected capacity change from 0 to 32768 [ 170.211234][ T7535] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 7542] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7542] close(3) = 0 [pid 7542] close(4) = 0 [pid 7542] mkdir("./file0", 0777) = 0 [ 170.225306][ T7539] BTRFS: device /dev/loop3 (7:3) using temp-fsid 2fb00f54-748e-45b6-8162-2c4812d0b6ca [ 170.227581][ T7535] BTRFS info (device loop0): using free-space-tree [ 170.239979][ T7539] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7539) [ 170.247403][ T7540] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 170.270160][ T7540] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 170.294197][ T7540] BTRFS info (device loop2): using free-space-tree [ 170.302859][ T7539] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 170.317714][ T7539] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 170.322771][ T7542] BTRFS: device /dev/loop1 (7:1) using temp-fsid 6f3b550d-bd9b-4fe1-a307-d68038becdac [ 170.336097][ T7539] BTRFS info (device loop3): using free-space-tree [ 170.373717][ T7542] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7542) [ 170.458290][ T7542] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7542] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7540] <... mount resumed>) = 0 [pid 7536] <... mount resumed>) = 0 [pid 7540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7540] <... openat resumed>) = 3 [pid 7536] chdir("./file0" [pid 7540] chdir("./file0" [pid 7536] <... chdir resumed>) = 0 [pid 7536] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7540] <... chdir resumed>) = 0 [pid 7540] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7536] <... openat resumed>) = 4 [pid 7540] <... openat resumed>) = 4 [pid 7536] ioctl(4, LOOP_CLR_FD [pid 7540] ioctl(4, LOOP_CLR_FD [pid 7536] <... ioctl resumed>) = 0 [pid 7540] <... ioctl resumed>) = 0 [pid 7536] close(4 [pid 7540] close(4 [pid 7536] <... close resumed>) = 0 [pid 7540] <... close resumed>) = 0 [pid 7536] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7540] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7536] <... futex resumed>) = 1 [pid 7534] <... futex resumed>) = 0 [pid 7540] <... futex resumed>) = 1 [pid 7538] <... futex resumed>) = 0 [pid 7536] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7540] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7538] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7534] <... futex resumed>) = 0 [pid 7540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7538] <... futex resumed>) = 0 [pid 7536] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7534] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7540] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7538] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7540] <... openat resumed>) = 4 [pid 7536] <... openat resumed>) = 4 [pid 7536] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7534] <... futex resumed>) = 0 [pid 7534] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 170.506874][ T7542] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 170.516446][ T7542] BTRFS info (device loop1): using free-space-tree [pid 7534] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7536] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7540] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7538] <... futex resumed>) = 0 [pid 7536] <... fallocate resumed>) = 0 [pid 7538] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7536] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7538] <... futex resumed>) = 0 [pid 7536] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] <... futex resumed>) = 0 [pid 7538] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7534] exit_group(0 [pid 7540] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7536] <... futex resumed>) = ? [pid 7534] <... exit_group resumed>) = ? [pid 7536] +++ exited with 0 +++ [pid 7540] <... fallocate resumed>) = 0 [pid 7534] +++ exited with 0 +++ [pid 7540] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7538] <... futex resumed>) = 0 [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7534, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=24 /* 0.24 s */} --- [pid 7540] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7538] exit_group(0 [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 7540] <... futex resumed>) = ? [pid 7538] <... exit_group resumed>) = ? [pid 7540] +++ exited with 0 +++ [pid 7538] +++ exited with 0 +++ [pid 5244] <... restart_syscall resumed>) = 0 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7538, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} --- [pid 7539] <... mount resumed>) = 0 [pid 5244] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7539] chdir("./file0" [pid 5242] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7539] <... chdir resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5244] <... openat resumed>) = 3 [pid 5242] newfstatat(3, "", [pid 5244] newfstatat(3, "", [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, [pid 7539] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7539] ioctl(4, LOOP_CLR_FD) = 0 [pid 7539] close(4) = 0 [pid 7539] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] <... futex resumed>) = 0 [pid 7537] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7537] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7539] <... futex resumed>) = 1 [pid 5244] getdents64(3, [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7539] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5242] newfstatat(AT_FDCWD, "./26/binderfs", [pid 7539] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] <... futex resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./26/binderfs" [pid 7537] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7537] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7539] <... futex resumed>) = 1 [pid 7539] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7539] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] unlink("./25/binderfs" [pid 5242] <... unlink resumed>) = 0 [pid 5244] <... unlink resumed>) = 0 [pid 5242] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7539] <... futex resumed>) = 1 [pid 7537] <... futex resumed>) = 0 [pid 5244] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7537] exit_group(0) = ? [pid 7539] +++ exited with 0 +++ [pid 7537] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7537, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5243] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7535] <... mount resumed>) = 0 [pid 5243] <... openat resumed>) = 3 [pid 7535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", [pid 7535] chdir("./file0" [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7535] <... chdir resumed>) = 0 [pid 5243] getdents64(3, [pid 7535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7535] <... openat resumed>) = 4 [pid 7535] ioctl(4, LOOP_CLR_FD) = 0 [pid 7535] close(4 [pid 5243] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./25/binderfs", [pid 7535] <... close resumed>) = 0 [pid 5243] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./25/binderfs" [pid 7535] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7532] <... futex resumed>) = 0 [pid 7532] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... unlink resumed>) = 0 [pid 7535] <... futex resumed>) = 0 [pid 7532] <... futex resumed>) = 1 [pid 5243] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7535] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 7535] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7535] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7532] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7532] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... futex resumed>) = 0 [pid 7532] <... futex resumed>) = 1 [pid 7535] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7532] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7535] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7532] exit_group(0 [pid 7535] <... futex resumed>) = ? [pid 7532] <... exit_group resumed>) = ? [pid 7535] +++ exited with 0 +++ [pid 7532] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7532, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=26 /* 0.26 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./24/binderfs") = 0 [ 170.674297][ T5242] BTRFS info (device loop2): last unmount of filesystem dfb8a9a7-9ded-4bf4-bfc1-5c3b66fba772 [ 170.695147][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5240] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7542] <... mount resumed>) = 0 [pid 7542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7542] chdir("./file0") = 0 [pid 7542] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7542] ioctl(4, LOOP_CLR_FD) = 0 [pid 7542] close(4) = 0 [pid 7542] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7542] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] <... futex resumed>) = 0 [pid 7541] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... futex resumed>) = 0 [pid 7541] <... futex resumed>) = 1 [pid 7542] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7541] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7542] <... openat resumed>) = 4 [pid 7542] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7542] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] <... futex resumed>) = 0 [pid 7541] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... futex resumed>) = 0 [pid 7541] <... futex resumed>) = 1 [pid 7542] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7541] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7542] <... fallocate resumed>) = 0 [pid 7542] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7542] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] <... futex resumed>) = 0 [pid 7541] exit_group(0 [pid 7542] <... futex resumed>) = ? [pid 7541] <... exit_group resumed>) = ? [pid 7542] +++ exited with 0 +++ [pid 7541] +++ exited with 0 +++ [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7541, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=25 /* 0.25 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5241] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 170.739826][ T5243] BTRFS info (device loop3): last unmount of filesystem 2fb00f54-748e-45b6-8162-2c4812d0b6ca [ 170.776861][ T5240] BTRFS info (device loop0): last unmount of filesystem da99db68-907c-4105-bad2-b479419ad9b3 [pid 5241] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./24/binderfs") = 0 [pid 5241] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 170.946766][ T5241] BTRFS info (device loop1): last unmount of filesystem 6f3b550d-bd9b-4fe1-a307-d68038becdac [pid 5240] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4 [pid 5241] <... umount2 resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5241] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] rmdir("./24/file0" [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, [pid 5240] <... rmdir resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./24/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./24") = 0 [pid 5241] mkdir("./25", 0777) = 0 [pid 5240] <... close resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] rmdir("./24"./strace-static-x86_64: Process 7625 attached [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 7625 [pid 7625] set_robust_list(0x55558b77b760, 24) = 0 [pid 7625] chdir("./25" [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./25", 0777 [pid 7625] <... chdir resumed>) = 0 [pid 7625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7625] setpgid(0, 0) = 0 [pid 7625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] <... mkdir resumed>) = 0 [pid 7625] write(3, "1000", 4) = 4 [pid 7625] close(3) = 0 [pid 7625] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 7625] write(1, "executing program\n", 18) = 18 [pid 7625] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7625] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5240] <... openat resumed>) = 3 [pid 7625] <... clone3 resumed> => {parent_tid=[7626]}, 88) = 7626 [pid 7625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7625] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7626 attached ) = 0 [pid 7626] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5240] close(3 [pid 7626] <... rseq resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 7626] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 7627 [pid 7626] memfd_create("syzkaller", 0) = 3 [pid 7626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 ./strace-static-x86_64: Process 7627 attached [pid 5244] <... umount2 resumed>) = 0 [pid 7627] set_robust_list(0x55558b77b760, 24) = 0 [pid 7627] chdir("./25") = 0 [pid 7627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7627] setpgid(0, 0) = 0 [pid 7627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7627] write(3, "1000", 4) = 4 [pid 7627] close(3) = 0 [pid 7627] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7627] write(1, "executing program\n", 18) = 18 [pid 7627] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7627] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7627] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7628 attached => {parent_tid=[7628]}, 88) = 7628 [pid 7627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7627] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7627] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7628] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 5242] <... umount2 resumed>) = 0 [pid 7628] <... rseq resumed>) = 0 [pid 7628] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7628] memfd_create("syzkaller", 0 [pid 5242] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7628] <... memfd_create resumed>) = 3 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] newfstatat(AT_FDCWD, "./26/file0", [pid 7628] <... mmap resumed>) = 0x7f5116c00000 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5244] newfstatat(AT_FDCWD, "./25/file0", [pid 5242] getdents64(4, [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] close(4 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... close resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] rmdir("./26/file0" [pid 5244] <... openat resumed>) = 4 [pid 5242] <... rmdir resumed>) = 0 [pid 5244] newfstatat(4, "", [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] close(3 [pid 5244] getdents64(4, [pid 5242] <... close resumed>) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] rmdir("./26" [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 5244] rmdir("./25/file0") = 0 [pid 5242] <... rmdir resumed>) = 0 [pid 5244] getdents64(3, [pid 5242] mkdir("./27", 0777 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] <... mkdir resumed>) = 0 [pid 5244] close(3 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5244] <... close resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5244] rmdir("./25" [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5244] <... rmdir resumed>) = 0 [pid 5242] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5244] mkdir("./26", 0777 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7629 attached [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7629] set_robust_list(0x55558b77b760, 24 [pid 5244] <... openat resumed>) = 3 [pid 7629] <... set_robust_list resumed>) = 0 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7629] chdir("./27" [pid 5244] close(3 [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 7629 [pid 5244] <... close resumed>) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7630 attached [pid 7629] <... chdir resumed>) = 0 [pid 7629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7629] setpgid(0, 0) = 0 [pid 7629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7630 [pid 7629] <... openat resumed>) = 3 [pid 7630] set_robust_list(0x55558b77b760, 24 [pid 7629] write(3, "1000", 4) = 4 [pid 7629] close(3) = 0 [pid 7630] <... set_robust_list resumed>) = 0 [pid 7629] symlink("/dev/binderfs", "./binderfs" [pid 7630] chdir("./26" [pid 7629] <... symlink resumed>) = 0 executing program [pid 7630] <... chdir resumed>) = 0 [pid 7629] write(1, "executing program\n", 18 [pid 7630] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7629] <... write resumed>) = 18 [pid 7630] <... prctl resumed>) = 0 [pid 7629] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7630] setpgid(0, 0 [pid 7629] <... futex resumed>) = 0 [pid 7630] <... setpgid resumed>) = 0 [pid 7629] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7629] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7629] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7630] write(3, "1000", 4 [pid 7629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7630] <... write resumed>) = 4 [pid 7629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7630] close(3 [pid 7629] <... mmap resumed>) = 0x7f511f01f000 [pid 7629] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7630] <... close resumed>) = 0 [pid 7629] <... mprotect resumed>) = 0 [pid 7630] symlink("/dev/binderfs", "./binderfs" [pid 7629] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7630] <... symlink resumed>) = 0 [pid 7629] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}executing program [pid 7630] write(1, "executing program\n", 18) = 18 [pid 7629] <... clone3 resumed> => {parent_tid=[7631]}, 88) = 7631 [pid 7630] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7629] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7631 attached [pid 7630] <... futex resumed>) = 0 [pid 7629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7630] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7629] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7630] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7629] <... futex resumed>) = 0 [pid 7630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7629] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7630] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7631] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7632 attached => {parent_tid=[7632]}, 88) = 7632 [pid 7631] <... rseq resumed>) = 0 [pid 7632] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7631] set_robust_list(0x7f511f03f9a0, 24 [pid 7630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7631] <... set_robust_list resumed>) = 0 [pid 7630] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... rseq resumed>) = 0 [pid 7630] <... futex resumed>) = 0 [pid 7632] set_robust_list(0x7f511f03f9a0, 24 [pid 7631] rt_sigprocmask(SIG_SETMASK, [], [pid 7630] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7632] <... set_robust_list resumed>) = 0 [pid 7632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7632] memfd_create("syzkaller", 0) = 3 [pid 7631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7631] memfd_create("syzkaller", 0 [pid 7632] <... mmap resumed>) = 0x7f5116c00000 [pid 7631] <... memfd_create resumed>) = 3 [pid 7631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./25/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./25") = 0 [pid 5243] mkdir("./26", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7633 attached , child_tidptr=0x55558b77b750) = 7633 [pid 7633] set_robust_list(0x55558b77b760, 24) = 0 [pid 7633] chdir("./26") = 0 [pid 7633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7633] setpgid(0, 0) = 0 [pid 7633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7633] write(3, "1000", 4) = 4 [pid 7633] close(3) = 0 [pid 7633] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7633] write(1, "executing program\n", 18executing program ) = 18 [pid 7633] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7633] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7633] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7634 attached => {parent_tid=[7634]}, 88) = 7634 [pid 7633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7633] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7634] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7633] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7634] <... rseq resumed>) = 0 [pid 7634] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7634] memfd_create("syzkaller", 0) = 3 [pid 7634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7628] <... write resumed>) = 16777216 [pid 7628] munmap(0x7f5116c00000, 138412032) = 0 [pid 7628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7628] ioctl(4, LOOP_SET_FD, 3 [pid 7634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7628] <... ioctl resumed>) = 0 [pid 7628] close(3) = 0 [pid 7628] close(4 [pid 7626] <... write resumed>) = 16777216 [pid 7628] <... close resumed>) = 0 [ 172.070403][ T7628] loop0: detected capacity change from 0 to 32768 [pid 7628] mkdir("./file0", 0777) = 0 [pid 7628] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7626] munmap(0x7f5116c00000, 138412032) = 0 [ 172.150423][ T7628] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7628) [pid 7626] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7626] ioctl(4, LOOP_SET_FD, 3 [pid 7632] <... write resumed>) = 16777216 [pid 7632] munmap(0x7f5116c00000, 138412032 [pid 7626] <... ioctl resumed>) = 0 [pid 7626] close(3) = 0 [pid 7632] <... munmap resumed>) = 0 [pid 7626] close(4 [pid 7632] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7626] <... close resumed>) = 0 [pid 7626] mkdir("./file0", 0777 [pid 7632] <... openat resumed>) = 4 [pid 7632] ioctl(4, LOOP_SET_FD, 3 [pid 7626] <... mkdir resumed>) = 0 [ 172.202981][ T7626] loop1: detected capacity change from 0 to 32768 [ 172.214676][ T7628] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 172.236790][ T7628] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [pid 7631] <... write resumed>) = 16777216 [pid 7626] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7632] <... ioctl resumed>) = 0 [pid 7631] munmap(0x7f5116c00000, 138412032 [pid 7632] close(3) = 0 [pid 7632] close(4) = 0 [pid 7632] mkdir("./file0", 0777) = 0 [pid 7632] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7631] <... munmap resumed>) = 0 [pid 7631] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 172.251699][ T7632] loop4: detected capacity change from 0 to 32768 [ 172.252373][ T7628] BTRFS info (device loop0): using free-space-tree [ 172.266308][ T7626] BTRFS: device /dev/loop1 (7:1) using temp-fsid dae89164-8fc8-46a4-920c-5ee9195cda55 [ 172.286759][ T7626] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7626) [pid 7631] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7631] close(3) = 0 [pid 7631] close(4) = 0 [pid 7631] mkdir("./file0", 0777) = 0 [ 172.326154][ T7632] BTRFS: device /dev/loop4 (7:4) using temp-fsid 77a8ad79-1c8d-490e-83b7-9270eabd7f6d [ 172.343005][ T7631] loop2: detected capacity change from 0 to 32768 [ 172.354361][ T7632] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7632) [ 172.369463][ T7626] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 172.393239][ T7632] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 172.403056][ T7631] BTRFS: device /dev/loop2 (7:2) using temp-fsid 533dacdd-7ba0-4be6-904e-9e744c818e46 [ 172.413130][ T7632] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.431678][ T7632] BTRFS info (device loop4): using free-space-tree [ 172.432013][ T7626] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 172.469689][ T7631] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7631) [pid 7631] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7634] <... write resumed>) = 16777216 [pid 7634] munmap(0x7f5116c00000, 138412032) = 0 [ 172.503324][ T7626] BTRFS info (device loop1): using free-space-tree [pid 7634] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7634] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7634] close(3) = 0 [pid 7634] close(4) = 0 [pid 7634] mkdir("./file0", 0777 [pid 7628] <... mount resumed>) = 0 [pid 7634] <... mkdir resumed>) = 0 [pid 7634] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7628] chdir("./file0") = 0 [pid 7628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 172.556074][ T7631] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 172.583275][ T7634] loop3: detected capacity change from 0 to 32768 [ 172.594387][ T7631] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 7628] ioctl(4, LOOP_CLR_FD) = 0 [pid 7628] close(4) = 0 [pid 7628] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7628] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] <... futex resumed>) = 0 [pid 7627] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7628] <... futex resumed>) = 0 [pid 7627] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 7628] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7628] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] <... futex resumed>) = 0 [pid 7627] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7628] <... futex resumed>) = 0 [pid 7627] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7628] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 172.617069][ T7634] BTRFS: device /dev/loop3 (7:3) using temp-fsid e051e13e-89b2-41dd-9d9c-3ddc0c5b8e3f [ 172.627429][ T7631] BTRFS info (device loop2): using free-space-tree [ 172.643435][ T7634] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7634) [pid 7628] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7627] exit_group(0 [pid 7628] <... futex resumed>) = ? [pid 7627] <... exit_group resumed>) = ? [pid 7628] +++ exited with 0 +++ [pid 7627] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7627, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=33 /* 0.33 s */} --- [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./25/binderfs") = 0 [ 172.682024][ T7634] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 172.696780][ T7634] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 172.705721][ T7634] BTRFS info (device loop3): using free-space-tree [pid 5240] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7632] <... mount resumed>) = 0 [pid 7626] <... mount resumed>) = 0 [pid 7632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7632] <... openat resumed>) = 3 [pid 7626] <... openat resumed>) = 3 [pid 7632] chdir("./file0" [pid 7626] chdir("./file0" [pid 7632] <... chdir resumed>) = 0 [pid 7626] <... chdir resumed>) = 0 [pid 7632] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7626] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7632] <... openat resumed>) = 4 [pid 7626] <... openat resumed>) = 4 [pid 7632] ioctl(4, LOOP_CLR_FD [pid 7626] ioctl(4, LOOP_CLR_FD [pid 7632] <... ioctl resumed>) = 0 [pid 7626] <... ioctl resumed>) = 0 [pid 7632] close(4 [pid 7626] close(4 [pid 7632] <... close resumed>) = 0 [pid 7626] <... close resumed>) = 0 [pid 7632] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... futex resumed>) = 1 [pid 7630] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7632] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7630] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... openat resumed>) = 4 [pid 7630] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7625] <... futex resumed>) = 0 [pid 7630] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7625] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] <... openat resumed>) = 4 [pid 7632] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... futex resumed>) = 1 [pid 7630] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7625] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7632] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7630] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7625] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7632] <... fallocate resumed>) = 0 [pid 7630] <... futex resumed>) = 0 [pid 7626] <... fallocate resumed>) = 0 [pid 7632] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7630] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7626] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7632] <... futex resumed>) = 0 [pid 7630] exit_group(0 [pid 7626] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] exit_group(0 [pid 7630] <... exit_group resumed>) = ? [pid 7626] <... futex resumed>) = ? [pid 7625] <... exit_group resumed>) = ? [pid 7632] +++ exited with 0 +++ [pid 7630] +++ exited with 0 +++ [pid 7626] +++ exited with 0 +++ [pid 7625] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7630, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=31 /* 0.31 s */} --- [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7625, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5244] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] newfstatat(3, "", [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] getdents64(3, [pid 5241] <... openat resumed>) = 3 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] newfstatat(3, "", [pid 5244] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5241] unlink("./25/binderfs" [pid 5244] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] <... unlink resumed>) = 0 [pid 5244] unlink("./26/binderfs" [pid 5241] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... unlink resumed>) = 0 [ 172.840369][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 5244] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7631] <... mount resumed>) = 0 [pid 7631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7631] chdir("./file0" [pid 7634] <... mount resumed>) = 0 [pid 7631] <... chdir resumed>) = 0 [pid 7631] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7631] ioctl(4, LOOP_CLR_FD) = 0 [pid 7634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7631] close(4 [pid 7634] <... openat resumed>) = 3 [pid 7631] <... close resumed>) = 0 [pid 7634] chdir("./file0") = 0 [pid 7634] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7631] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7634] ioctl(4, LOOP_CLR_FD) = 0 [pid 7631] <... futex resumed>) = 1 [pid 7634] close(4) = 0 [pid 7631] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7629] <... futex resumed>) = 0 [pid 7634] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7633] <... futex resumed>) = 0 [pid 7631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7629] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7634] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7633] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7633] <... futex resumed>) = 0 [pid 7634] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7633] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7634] <... openat resumed>) = 4 [pid 7631] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7629] <... futex resumed>) = 0 [pid 7634] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7631] <... openat resumed>) = 4 [pid 7629] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7631] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7629] <... futex resumed>) = 0 [pid 7631] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7629] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7634] <... futex resumed>) = 1 [pid 7633] <... futex resumed>) = 0 [pid 7631] <... fallocate resumed>) = 0 [pid 7629] <... futex resumed>) = 0 [pid 7634] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7633] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7633] <... futex resumed>) = 0 [pid 7634] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7633] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7634] <... fallocate resumed>) = 0 [pid 7631] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7629] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7631] <... futex resumed>) = 0 [pid 7629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7631] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7629] exit_group(0 [pid 7631] <... futex resumed>) = ? [pid 7629] <... exit_group resumed>) = ? [pid 7631] +++ exited with 0 +++ [pid 7629] +++ exited with 0 +++ [pid 7634] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7629, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 7634] <... futex resumed>) = 1 [pid 7633] <... futex resumed>) = 0 [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 7634] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] <... restart_syscall resumed>) = 0 [pid 7633] exit_group(0 [pid 7634] <... futex resumed>) = ? [pid 7633] <... exit_group resumed>) = ? [pid 5242] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7634] +++ exited with 0 +++ [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7633] +++ exited with 0 +++ [pid 5242] getdents64(3, [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7633, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=25 /* 0.25 s */} --- [pid 5243] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] <... openat resumed>) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./26/binderfs") = 0 [pid 5243] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./27/binderfs") = 0 [pid 5242] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 172.957835][ T5241] BTRFS info (device loop1): last unmount of filesystem dae89164-8fc8-46a4-920c-5ee9195cda55 [ 172.987895][ T5244] BTRFS info (device loop4): last unmount of filesystem 77a8ad79-1c8d-490e-83b7-9270eabd7f6d [pid 5240] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, [pid 5241] <... umount2 resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] close(4 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] <... close resumed>) = 0 [pid 5241] newfstatat(AT_FDCWD, "./25/file0", [pid 5240] rmdir("./25/file0" [pid 5241] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5240] getdents64(3, [pid 5241] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] <... close resumed>) = 0 [pid 5241] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] rmdir("./25" [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5241] getdents64(4, [pid 5240] mkdir("./26", 0777 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, [pid 5240] <... mkdir resumed>) = 0 [pid 5241] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./25/file0" [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5241] <... rmdir resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5241] getdents64(3, [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5240] close(3 [pid 5241] close(3 [pid 5240] <... close resumed>) = 0 [ 173.084258][ T5242] BTRFS info (device loop2): last unmount of filesystem 533dacdd-7ba0-4be6-904e-9e744c818e46 [ 173.104005][ T5243] BTRFS info (device loop3): last unmount of filesystem e051e13e-89b2-41dd-9d9c-3ddc0c5b8e3f [pid 5241] <... close resumed>) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5241] rmdir("./25") = 0 [pid 5241] mkdir("./26", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = 0 [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] <... clone resumed>, child_tidptr=0x55558b77b750) = 7718 ./strace-static-x86_64: Process 7718 attached ./strace-static-x86_64: Process 7719 attached [pid 7718] set_robust_list(0x55558b77b760, 24 [pid 7719] set_robust_list(0x55558b77b760, 24 [pid 7718] <... set_robust_list resumed>) = 0 [pid 5241] <... clone resumed>, child_tidptr=0x55558b77b750) = 7719 [pid 7719] <... set_robust_list resumed>) = 0 [pid 7718] chdir("./26" [pid 7719] chdir("./26" [pid 7718] <... chdir resumed>) = 0 [pid 7719] <... chdir resumed>) = 0 [pid 7718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7718] <... prctl resumed>) = 0 [pid 7719] <... prctl resumed>) = 0 [pid 7718] setpgid(0, 0 [pid 7719] setpgid(0, 0 [pid 7718] <... setpgid resumed>) = 0 [pid 7718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7719] <... setpgid resumed>) = 0 [pid 7719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7718] <... openat resumed>) = 3 [pid 7719] <... openat resumed>) = 3 [pid 7718] write(3, "1000", 4) = 4 [pid 7719] write(3, "1000", 4) = 4 [pid 7718] close(3) = 0 [pid 5242] <... umount2 resumed>) = 0 [pid 7719] close(3 [pid 7718] symlink("/dev/binderfs", "./binderfs" [pid 7719] <... close resumed>) = 0 [pid 7718] <... symlink resumed>) = 0 [pid 5242] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 7718] write(1, "executing program\n", 18 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./27/file0", [pid 7718] <... write resumed>) = 18 [pid 7719] symlink("/dev/binderfs", "./binderfs" [pid 7718] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7718] <... futex resumed>) = 0 [pid 7719] <... symlink resumed>) = 0 [pid 7718] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7719] write(1, "executing program\n", 18 [pid 7718] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 7718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5242] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7719] <... write resumed>) = 18 [pid 7718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... openat resumed>) = 4 [pid 7719] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7718] <... mmap resumed>) = 0x7f511f01f000 [pid 7719] <... futex resumed>) = 0 [pid 7718] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5242] getdents64(4, [pid 7719] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7718] <... mprotect resumed>) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7719] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 7718] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] getdents64(4, [pid 7719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] close(4 [pid 7719] <... mmap resumed>) = 0x7f511f01f000 [pid 5242] <... close resumed>) = 0 [pid 7719] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7718] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] rmdir("./27/file0" [pid 7719] <... mprotect resumed>) = 0 [pid 7718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7719] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] <... rmdir resumed>) = 0 [pid 7719] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] getdents64(3, [pid 7719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7720 attached ./strace-static-x86_64: Process 7721 attached [pid 5242] close(3) = 0 [pid 7719] <... clone3 resumed> => {parent_tid=[7721]}, 88) = 7721 [pid 7718] <... clone3 resumed> => {parent_tid=[7720]}, 88) = 7720 [pid 5242] rmdir("./27" [pid 7720] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7721] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7720] <... rseq resumed>) = 0 [pid 7719] rt_sigprocmask(SIG_SETMASK, [], [pid 7718] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... rmdir resumed>) = 0 [pid 7720] set_robust_list(0x7f511f03f9a0, 24 [pid 7719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] mkdir("./28", 0777 [pid 7720] <... set_robust_list resumed>) = 0 [pid 7718] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] rt_sigprocmask(SIG_SETMASK, [], [pid 7718] <... futex resumed>) = 0 [pid 7720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7718] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7721] <... rseq resumed>) = 0 [pid 7720] memfd_create("syzkaller", 0 [pid 7721] set_robust_list(0x7f511f03f9a0, 24 [pid 7720] <... memfd_create resumed>) = 3 [pid 7719] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7721] <... set_robust_list resumed>) = 0 [pid 7721] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... mkdir resumed>) = 0 [pid 7721] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7720] <... mmap resumed>) = 0x7f5116c00000 [pid 7719] <... futex resumed>) = 0 [pid 7721] memfd_create("syzkaller", 0 [pid 7719] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7721] <... memfd_create resumed>) = 3 [pid 5242] <... openat resumed>) = 3 [pid 7721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 5242] ioctl(3, LOOP_CLR_FD) = 0 [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7722 ./strace-static-x86_64: Process 7722 attached [pid 7722] set_robust_list(0x55558b77b760, 24) = 0 [pid 7722] chdir("./28") = 0 [pid 7722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7722] setpgid(0, 0) = 0 [pid 7722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7722] write(3, "1000", 4) = 4 [pid 5244] <... umount2 resumed>) = 0 [pid 7722] close(3) = 0 [pid 7722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 7722] write(1, "executing program\n", 18 [pid 5244] newfstatat(AT_FDCWD, "./26/file0", [pid 5243] <... umount2 resumed>) = 0 [pid 7722] <... write resumed>) = 18 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7722] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7722] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7722] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7722] <... mmap resumed>) = 0x7f511f01f000 [pid 5244] <... openat resumed>) = 4 [pid 7722] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 5244] newfstatat(4, "", [pid 5243] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7722] <... mprotect resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7722] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] getdents64(4, [pid 5243] newfstatat(AT_FDCWD, "./26/file0", [pid 7722] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7723 attached [pid 5244] getdents64(4, [pid 5243] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7722] <... clone3 resumed> => {parent_tid=[7723]}, 88) = 7723 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7723] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7722] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] close(4 [pid 5243] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7723] <... rseq resumed>) = 0 [pid 7722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7723] set_robust_list(0x7f511f03f9a0, 24 [pid 7722] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... close resumed>) = 0 [pid 7723] <... set_robust_list resumed>) = 0 [pid 7722] <... futex resumed>) = 0 [pid 5244] rmdir("./26/file0" [pid 5243] <... openat resumed>) = 4 [pid 7723] rt_sigprocmask(SIG_SETMASK, [], [pid 7722] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5243] newfstatat(4, "", [pid 7723] memfd_create("syzkaller", 0 [pid 5244] getdents64(3, [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7723] <... memfd_create resumed>) = 3 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, [pid 7723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] close(3 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 7723] <... mmap resumed>) = 0x7f5116c00000 [pid 5244] <... close resumed>) = 0 [pid 5243] close(4) = 0 [pid 5244] rmdir("./26" [pid 5243] rmdir("./26/file0") = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 5243] getdents64(3, [pid 5244] mkdir("./27", 0777 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3 [pid 5244] <... mkdir resumed>) = 0 [pid 5243] <... close resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5243] rmdir("./26") = 0 [pid 5244] <... openat resumed>) = 3 [pid 5243] mkdir("./27", 0777 [pid 5244] ioctl(3, LOOP_CLR_FD [pid 5243] <... mkdir resumed>) = 0 [pid 5244] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5244] close(3 [pid 5243] ioctl(3, LOOP_CLR_FD [pid 5244] <... close resumed>) = 0 [pid 5243] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] close(3./strace-static-x86_64: Process 7724 attached [pid 7720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... close resumed>) = 0 [pid 7724] set_robust_list(0x55558b77b760, 24 [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7724 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7724] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 7725 attached [pid 7724] chdir("./27" [pid 7725] set_robust_list(0x55558b77b760, 24 [pid 7724] <... chdir resumed>) = 0 [pid 7725] <... set_robust_list resumed>) = 0 [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 7725 [pid 7725] chdir("./27" [pid 7724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7725] <... chdir resumed>) = 0 [pid 7724] <... prctl resumed>) = 0 [pid 7725] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7724] setpgid(0, 0 [pid 7725] <... prctl resumed>) = 0 [pid 7725] setpgid(0, 0 [pid 7724] <... setpgid resumed>) = 0 [pid 7725] <... setpgid resumed>) = 0 [pid 7724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7724] <... openat resumed>) = 3 [pid 7724] write(3, "1000", 4) = 4 executing program [pid 7725] <... openat resumed>) = 3 [pid 7724] close(3) = 0 [pid 7724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7724] write(1, "executing program\n", 18) = 18 [pid 7724] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7724] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 executing program [pid 7725] write(3, "1000", 4 [pid 7724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7725] <... write resumed>) = 4 [pid 7724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7725] close(3 [pid 7724] <... mmap resumed>) = 0x7f511f01f000 [pid 7725] <... close resumed>) = 0 [pid 7725] symlink("/dev/binderfs", "./binderfs" [pid 7724] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7725] <... symlink resumed>) = 0 [pid 7724] <... mprotect resumed>) = 0 [pid 7725] write(1, "executing program\n", 18 [pid 7724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7725] <... write resumed>) = 18 [pid 7725] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7725] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 7724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7725] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 7726 attached [pid 7726] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7726] set_robust_list(0x7f511f03f9a0, 24 [pid 7724] <... clone3 resumed> => {parent_tid=[7726]}, 88) = 7726 [pid 7726] <... set_robust_list resumed>) = 0 [pid 7724] rt_sigprocmask(SIG_SETMASK, [], [pid 7726] rt_sigprocmask(SIG_SETMASK, [], [pid 7725] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7724] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7726] memfd_create("syzkaller", 0 [pid 7724] <... futex resumed>) = 0 [pid 7725] <... mmap resumed>) = 0x7f511f01f000 [pid 7726] <... memfd_create resumed>) = 3 [pid 7724] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7725] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7726] <... mmap resumed>) = 0x7f5116c00000 [pid 7725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7727 attached [pid 7727] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7727] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7727] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] <... clone3 resumed> => {parent_tid=[7727]}, 88) = 7727 [pid 7725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7725] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7727] <... futex resumed>) = 0 [pid 7725] <... futex resumed>) = 1 [pid 7727] memfd_create("syzkaller", 0 [pid 7725] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7727] <... memfd_create resumed>) = 3 [pid 7727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7720] <... write resumed>) = 16777216 [pid 7720] munmap(0x7f5116c00000, 138412032) = 0 [pid 7720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7720] close(3) = 0 [pid 7720] close(4) = 0 [pid 7720] mkdir("./file0", 0777) = 0 [ 174.050669][ T7720] loop0: detected capacity change from 0 to 32768 [ 174.088115][ T7720] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7720) [pid 7720] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [ 174.147534][ T7720] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7721] <... write resumed>) = 16777216 [ 174.194013][ T7720] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 174.213971][ T7720] BTRFS info (device loop0): using free-space-tree [pid 7721] munmap(0x7f5116c00000, 138412032) = 0 [pid 7721] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7721] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7721] close(3) = 0 [pid 7721] close(4) = 0 [ 174.325363][ T7721] loop1: detected capacity change from 0 to 32768 [pid 7721] mkdir("./file0", 0777) = 0 [pid 7721] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7723] <... write resumed>) = 16777216 [pid 7723] munmap(0x7f5116c00000, 138412032) = 0 [ 174.365856][ T7721] BTRFS: device /dev/loop1 (7:1) using temp-fsid bd9dc042-d180-4d7e-8514-1de278d953e7 [pid 7723] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7720] <... mount resumed>) = 0 [pid 7723] <... openat resumed>) = 4 [pid 7723] ioctl(4, LOOP_SET_FD, 3 [pid 7720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7720] chdir("./file0") = 0 [pid 7720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7720] ioctl(4, LOOP_CLR_FD) = 0 [pid 7720] close(4) = 0 [pid 7720] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] <... futex resumed>) = 0 [pid 7720] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7718] <... futex resumed>) = 0 [pid 7720] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 7718] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7720] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7720] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7718] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7720] <... futex resumed>) = 0 [pid 7720] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7720] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] <... futex resumed>) = 0 [pid 7720] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7718] exit_group(0 [pid 7720] <... futex resumed>) = ? [pid 7718] <... exit_group resumed>) = ? [pid 7720] +++ exited with 0 +++ [pid 7718] +++ exited with 0 +++ [pid 7723] <... ioctl resumed>) = 0 [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7718, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=27 /* 0.27 s */} --- [pid 7723] close(3 [pid 5240] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5240] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7723] <... close resumed>) = 0 [pid 5240] getdents64(3, [pid 7723] close(4 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 7723] <... close resumed>) = 0 [pid 7723] mkdir("./file0", 0777 [pid 5240] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./26/binderfs") = 0 [pid 5240] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7723] <... mkdir resumed>) = 0 [ 174.415574][ T7721] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7721) [ 174.437874][ T7723] loop2: detected capacity change from 0 to 32768 [pid 7723] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7726] <... write resumed>) = 16777216 [ 174.509250][ T7723] BTRFS: device /dev/loop2 (7:2) using temp-fsid b5eeecbe-3838-4e99-8484-f04fca7e4934 [ 174.519893][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 174.519897][ T7721] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 174.519963][ T7721] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 7726] munmap(0x7f5116c00000, 138412032) = 0 [pid 7726] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 174.570717][ T7723] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7723) [ 174.609010][ T7726] loop4: detected capacity change from 0 to 32768 [pid 7726] ioctl(4, LOOP_SET_FD, 3 [pid 7727] <... write resumed>) = 16777216 [pid 7726] <... ioctl resumed>) = 0 [pid 7727] munmap(0x7f5116c00000, 138412032 [pid 7726] close(3) = 0 [pid 7726] close(4) = 0 [pid 7726] mkdir("./file0", 0777) = 0 [ 174.624522][ T7721] BTRFS info (device loop1): using free-space-tree [ 174.655539][ T7723] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7726] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7727] <... munmap resumed>) = 0 [pid 7727] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5240] <... umount2 resumed>) = 0 [pid 7727] <... openat resumed>) = 4 [pid 5240] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7727] ioctl(4, LOOP_SET_FD, 3 [pid 5240] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 174.665902][ T7726] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7726) [ 174.692023][ T7723] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 174.692162][ T7727] loop3: detected capacity change from 0 to 32768 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [pid 5240] rmdir("./26/file0" [pid 7727] <... ioctl resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 7727] close(3 [pid 5240] getdents64(3, [pid 7727] <... close resumed>) = 0 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [ 174.725785][ T7723] BTRFS info (device loop2): using free-space-tree [ 174.743604][ T7726] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7727] close(4 [pid 5240] rmdir("./26" [pid 7727] <... close resumed>) = 0 [pid 5240] <... rmdir resumed>) = 0 [pid 5240] mkdir("./27", 0777 [pid 7727] mkdir("./file0", 0777 [pid 5240] <... mkdir resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7727] <... mkdir resumed>) = 0 [pid 5240] ioctl(3, LOOP_CLR_FD [pid 7727] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5240] <... ioctl resumed>) = 0 [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7761 ./strace-static-x86_64: Process 7761 attached [pid 7761] set_robust_list(0x55558b77b760, 24) = 0 [pid 7761] chdir("./27") = 0 [ 174.783046][ T7726] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 174.804593][ T7726] BTRFS info (device loop4): using free-space-tree [ 174.819082][ T7727] BTRFS: device /dev/loop3 (7:3) using temp-fsid 6df07b84-4c02-40ee-bac3-b1d1cf8e32f0 [pid 7761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7761] setpgid(0, 0) = 0 [pid 7761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7761] write(3, "1000", 4) = 4 [pid 7761] close(3) = 0 [pid 7761] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7761] write(1, "executing program\n", 18) = 18 [pid 7761] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7761] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 174.845909][ T7727] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7727) [pid 7761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7761] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7777 attached => {parent_tid=[7777]}, 88) = 7777 [pid 7761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7761] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7761] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7777] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7777] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7777] memfd_create("syzkaller", 0) = 3 [pid 7777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [ 174.952929][ T7727] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7723] <... mount resumed>) = 0 [pid 7723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7723] chdir("./file0") = 0 [pid 7723] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7723] ioctl(4, LOOP_CLR_FD) = 0 [ 174.994186][ T7727] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [pid 7723] close(4) = 0 [pid 7723] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7723] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7722] <... futex resumed>) = 0 [pid 7726] <... mount resumed>) = 0 [pid 7722] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7721] <... mount resumed>) = 0 [pid 7726] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7723] <... futex resumed>) = 0 [pid 7722] <... futex resumed>) = 1 [pid 7721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 7726] chdir("./file0") = 0 [pid 7723] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7722] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7721] <... openat resumed>) = 3 [pid 7726] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7723] <... openat resumed>) = 4 [pid 7721] chdir("./file0" [pid 7726] ioctl(4, LOOP_CLR_FD [pid 7721] <... chdir resumed>) = 0 [pid 7726] <... ioctl resumed>) = 0 [pid 7721] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7726] close(4 [pid 7721] <... openat resumed>) = 4 [pid 7726] <... close resumed>) = 0 [pid 7721] ioctl(4, LOOP_CLR_FD [pid 7723] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7723] <... futex resumed>) = 1 [pid 7722] <... futex resumed>) = 0 [pid 7721] <... ioctl resumed>) = 0 [pid 7726] <... futex resumed>) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7723] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7722] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7721] close(4 [pid 7726] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7724] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7723] <... fallocate resumed>) = 0 [pid 7722] <... futex resumed>) = 0 [pid 7721] <... close resumed>) = 0 [pid 7726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7724] <... futex resumed>) = 0 [pid 7723] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7722] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7721] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7724] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7723] <... futex resumed>) = 0 [pid 7726] <... openat resumed>) = 4 [pid 7723] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7721] <... futex resumed>) = 1 [pid 7719] <... futex resumed>) = 0 [pid 7726] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7722] exit_group(0 [pid 7721] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [ 175.060942][ T7727] BTRFS info (device loop3): using free-space-tree [pid 7719] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... futex resumed>) = 0 [pid 7724] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7723] <... futex resumed>) = ? [pid 7722] <... exit_group resumed>) = ? [pid 7721] <... openat resumed>) = 4 [pid 7719] <... futex resumed>) = 0 [pid 7726] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7724] <... futex resumed>) = 0 [pid 7723] +++ exited with 0 +++ [pid 7722] +++ exited with 0 +++ [pid 7721] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7719] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7726] <... fallocate resumed>) = 0 [pid 7724] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7721] <... futex resumed>) = 0 [pid 7719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7726] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7719] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... futex resumed>) = 0 [pid 7726] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7719] <... futex resumed>) = 0 [pid 7724] exit_group(0 [pid 7719] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7726] <... futex resumed>) = ? [pid 7724] <... exit_group resumed>) = ? [pid 7726] +++ exited with 0 +++ [pid 7721] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7722, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=30 /* 0.30 s */} --- [pid 7721] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] restart_syscall(<... resuming interrupted clone ...> [pid 7721] <... futex resumed>) = 1 [pid 5242] <... restart_syscall resumed>) = 0 [pid 7721] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7719] <... futex resumed>) = 0 [pid 5242] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7719] exit_group(0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7721] <... futex resumed>) = ? [pid 7719] <... exit_group resumed>) = ? [pid 5242] getdents64(3, [pid 7724] +++ exited with 0 +++ [pid 7721] +++ exited with 0 +++ [pid 7719] +++ exited with 0 +++ [pid 5242] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7719, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7724, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] restart_syscall(<... resuming interrupted clone ...> [pid 5242] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./28/binderfs") = 0 [pid 5242] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5244] <... restart_syscall resumed>) = 0 [pid 5244] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./27/binderfs") = 0 [pid 5244] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7727] <... mount resumed>) = 0 [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5241] newfstatat(AT_FDCWD, "./26/binderfs", [pid 7727] <... openat resumed>) = 3 [pid 5241] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] unlink("./26/binderfs" [pid 7727] chdir("./file0" [pid 5241] <... unlink resumed>) = 0 [pid 7727] <... chdir resumed>) = 0 [pid 5241] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7727] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7727] ioctl(4, LOOP_CLR_FD) = 0 [pid 7727] close(4) = 0 [pid 7727] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7727] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7725] <... futex resumed>) = 0 [pid 7725] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7727] <... futex resumed>) = 0 [pid 7725] <... futex resumed>) = 1 [pid 7727] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7725] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7727] <... openat resumed>) = 4 [pid 7727] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7725] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7727] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5) = 0 [pid 7727] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7725] exit_group(0) = ? [pid 7727] +++ exited with 0 +++ [pid 7725] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7725, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5243] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5243] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 175.237966][ T5244] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 175.248883][ T5242] BTRFS info (device loop2): last unmount of filesystem b5eeecbe-3838-4e99-8484-f04fca7e4934 [pid 5243] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./27/binderfs") = 0 [ 175.294145][ T5241] BTRFS info (device loop1): last unmount of filesystem bd9dc042-d180-4d7e-8514-1de278d953e7 [ 175.375230][ T5243] BTRFS info (device loop3): last unmount of filesystem 6df07b84-4c02-40ee-bac3-b1d1cf8e32f0 [pid 5243] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5241] <... umount2 resumed>) = 0 [pid 5241] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5241] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5241] close(4) = 0 [pid 5241] rmdir("./26/file0") = 0 [pid 5241] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5241] rmdir("./26") = 0 [pid 5241] mkdir("./27", 0777) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5241] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5241] close(3) = 0 [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7812 ./strace-static-x86_64: Process 7812 attached [pid 7812] set_robust_list(0x55558b77b760, 24) = 0 [pid 7812] chdir("./27") = 0 [pid 7812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5242] <... umount2 resumed>) = 0 [pid 7812] setpgid(0, 0) = 0 [pid 7812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7812] write(3, "1000", 4) = 4 [pid 7812] close(3) = 0 [pid 7812] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7812] write(1, "executing program\n", 18) = 18 [pid 7812] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7812] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7812] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7812] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7812] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7813 attached => {parent_tid=[7813]}, 88) = 7813 [pid 7813] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7812] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7812] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7812] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7812] <... futex resumed>) = 0 [pid 7812] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] newfstatat(AT_FDCWD, "./28/file0", [pid 7813] <... rseq resumed>) = 0 [pid 5242] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4 [pid 7813] set_robust_list(0x7f511f03f9a0, 24 [pid 5242] <... close resumed>) = 0 [pid 7813] <... set_robust_list resumed>) = 0 [pid 7813] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] rmdir("./28/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3 [pid 7813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] <... umount2 resumed>) = 0 [pid 5242] <... close resumed>) = 0 [pid 5242] rmdir("./28" [pid 7813] memfd_create("syzkaller", 0 [pid 5244] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] <... rmdir resumed>) = 0 [pid 7813] <... memfd_create resumed>) = 3 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] mkdir("./29", 0777 [pid 7813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] newfstatat(AT_FDCWD, "./27/file0", [pid 5242] <... mkdir resumed>) = 0 [pid 7813] <... mmap resumed>) = 0x7f5116c00000 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7814 attached , child_tidptr=0x55558b77b750) = 7814 [pid 5244] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7814] set_robust_list(0x55558b77b760, 24) = 0 [pid 7814] chdir("./29") = 0 [pid 5244] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7814] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7814] <... prctl resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 7814] setpgid(0, 0 [pid 5244] newfstatat(4, "", [pid 7814] <... setpgid resumed>) = 0 [pid 5244] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] getdents64(4, [pid 7814] <... openat resumed>) = 3 [pid 5244] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7814] write(3, "1000", 4 [pid 5244] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5244] close(4) = 0 [pid 7814] <... write resumed>) = 4 [pid 5244] rmdir("./27/file0"executing program [pid 7814] close(3 [pid 5244] <... rmdir resumed>) = 0 [pid 7814] <... close resumed>) = 0 [pid 5244] getdents64(3, [pid 7814] symlink("/dev/binderfs", "./binderfs" [pid 5244] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 7814] <... symlink resumed>) = 0 [pid 5244] close(3 [pid 7814] write(1, "executing program\n", 18 [pid 5244] <... close resumed>) = 0 [pid 7814] <... write resumed>) = 18 [pid 5244] rmdir("./27" [pid 7814] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] <... rmdir resumed>) = 0 [pid 7814] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5244] mkdir("./28", 0777 [pid 7814] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5244] <... mkdir resumed>) = 0 [pid 7814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] <... openat resumed>) = 3 [pid 7814] <... mmap resumed>) = 0x7f511f01f000 [pid 5244] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5244] close(3) = 0 [pid 5244] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7815 attached [pid 7814] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7816 attached [pid 5244] <... clone resumed>, child_tidptr=0x55558b77b750) = 7815 [pid 7816] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7814] <... clone3 resumed> => {parent_tid=[7816]}, 88) = 7816 [pid 7815] set_robust_list(0x55558b77b760, 24 [pid 7816] <... rseq resumed>) = 0 [pid 7816] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7814] rt_sigprocmask(SIG_SETMASK, [], [pid 7816] rt_sigprocmask(SIG_SETMASK, [], [pid 7814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7814] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] memfd_create("syzkaller", 0 [pid 7815] <... set_robust_list resumed>) = 0 [pid 7814] <... futex resumed>) = 0 [pid 7816] <... memfd_create resumed>) = 3 [pid 7814] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7815] chdir("./28") = 0 [pid 7815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7815] setpgid(0, 0 [pid 5243] <... umount2 resumed>) = 0 [pid 7815] <... setpgid resumed>) = 0 [pid 5243] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] <... openat resumed>) = 4 [pid 5243] newfstatat(4, "", [pid 7815] <... openat resumed>) = 3 [pid 5243] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7815] write(3, "1000", 4) = 4 [pid 5243] getdents64(4, [pid 7815] close(3) = 0 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 2 entries */, 32768) = 48 [pid 7815] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5243] getdents64(4, [pid 7815] write(1, "executing program\n", 18 [pid 5243] <... getdents64 resumed>0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./27/file0") = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5243] close(3) = 0 [pid 5243] rmdir("./27") = 0 [pid 5243] mkdir("./28", 0777) = 0 executing program [pid 7815] <... write resumed>) = 18 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5243] close(3 [pid 7815] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... close resumed>) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7815] <... futex resumed>) = 0 [pid 7815] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7815] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7815] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7815] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 5243] <... clone resumed>, child_tidptr=0x55558b77b750) = 7817 ./strace-static-x86_64: Process 7817 attached [pid 7817] set_robust_list(0x55558b77b760, 24) = 0 [pid 7817] chdir("./28"./strace-static-x86_64: Process 7818 attached [pid 7818] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7815] <... clone3 resumed> => {parent_tid=[7818]}, 88) = 7818 [pid 7818] <... rseq resumed>) = 0 [pid 7817] <... chdir resumed>) = 0 [pid 7815] rt_sigprocmask(SIG_SETMASK, [], [pid 7818] set_robust_list(0x7f511f03f9a0, 24 [pid 7815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7818] <... set_robust_list resumed>) = 0 [pid 7815] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] rt_sigprocmask(SIG_SETMASK, [], [pid 7815] <... futex resumed>) = 0 [pid 7818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7815] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7817] setpgid(0, 0) = 0 [pid 7817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7818] memfd_create("syzkaller", 0 [pid 7817] <... openat resumed>) = 3 [pid 7818] <... memfd_create resumed>) = 3 [pid 7818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7817] write(3, "1000", 4) = 4 [pid 7817] close(3) = 0 [pid 7817] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 7817] write(1, "executing program\n", 18) = 18 [pid 7817] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7817] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7817] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7819 attached => {parent_tid=[7819]}, 88) = 7819 [pid 7819] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7817] rt_sigprocmask(SIG_SETMASK, [], [pid 7819] <... rseq resumed>) = 0 [pid 7817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7819] set_robust_list(0x7f511f03f9a0, 24 [pid 7817] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] <... set_robust_list resumed>) = 0 [pid 7817] <... futex resumed>) = 0 [pid 7819] rt_sigprocmask(SIG_SETMASK, [], [pid 7817] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7819] memfd_create("syzkaller", 0) = 3 [pid 7819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7777] <... write resumed>) = 16777216 [pid 7777] munmap(0x7f5116c00000, 138412032) = 0 [pid 7777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7777] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7777] close(3) = 0 [pid 7777] close(4) = 0 [pid 7777] mkdir("./file0", 0777) = 0 [ 176.029652][ T7777] loop0: detected capacity change from 0 to 32768 [ 176.052221][ T7777] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor337 (7777) [ 176.107738][ T7777] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [pid 7777] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 176.154937][ T7777] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 176.182930][ T7777] BTRFS info (device loop0): using free-space-tree [pid 7813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 7777] <... mount resumed>) = 0 [pid 7777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7777] chdir("./file0") = 0 [pid 7777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7777] ioctl(4, LOOP_CLR_FD) = 0 [pid 7777] close(4) = 0 [pid 7777] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7761] <... futex resumed>) = 0 [pid 7777] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7761] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... futex resumed>) = 0 [pid 7761] <... futex resumed>) = 1 [pid 7777] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 7761] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7777] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7777] <... futex resumed>) = 0 [pid 7761] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7761] <... futex resumed>) = 0 [pid 7777] <... fallocate resumed>) = 0 [pid 7761] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7777] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7761] <... futex resumed>) = 0 [pid 7777] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7761] exit_group(0 [pid 7777] <... futex resumed>) = ? [pid 7761] <... exit_group resumed>) = ? [pid 7777] +++ exited with 0 +++ [pid 7761] +++ exited with 0 +++ [pid 5240] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7761, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5240] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", [pid 7813] <... write resumed>) = 16777216 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, [pid 7813] munmap(0x7f5116c00000, 138412032 [pid 5240] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5240] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] unlink("./27/binderfs") = 0 [pid 5240] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7813] <... munmap resumed>) = 0 [pid 7813] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7813] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7813] close(3) = 0 [pid 7813] close(4) = 0 [pid 7813] mkdir("./file0", 0777) = 0 [ 176.489919][ T5240] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 176.523339][ T7813] loop1: detected capacity change from 0 to 32768 [pid 7813] mount("/dev/loop1", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7816] <... write resumed>) = 16777216 [ 176.555857][ T7813] BTRFS: device /dev/loop1 (7:1) using temp-fsid 2e3c267a-e398-42ce-8820-7b0b67121db3 [pid 7816] munmap(0x7f5116c00000, 138412032) = 0 [pid 7816] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7816] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7816] close(3) = 0 [pid 7816] close(4) = 0 [pid 7816] mkdir("./file0", 0777) = 0 [ 176.598165][ T7813] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor337 (7813) [ 176.623676][ T7816] loop2: detected capacity change from 0 to 32768 [pid 7816] mount("/dev/loop2", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7818] <... write resumed>) = 16777216 [ 176.672926][ T7813] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 176.684847][ T7816] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor337 (7816) [ 176.712656][ T7813] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 7818] munmap(0x7f5116c00000, 138412032) = 0 [pid 7819] <... write resumed>) = 16777216 [pid 7819] munmap(0x7f5116c00000, 138412032 [pid 7818] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 176.737751][ T7813] BTRFS info (device loop1): using free-space-tree [ 176.763308][ T7816] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 176.791459][ T7818] loop4: detected capacity change from 0 to 32768 [ 176.798051][ T7816] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [pid 7818] ioctl(4, LOOP_SET_FD, 3 [pid 7819] <... munmap resumed>) = 0 [pid 7818] <... ioctl resumed>) = 0 [pid 7819] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7818] close(3) = 0 [pid 7818] close(4) = 0 [pid 7819] <... openat resumed>) = 4 [pid 7818] mkdir("./file0", 0777 [pid 7819] ioctl(4, LOOP_SET_FD, 3 [pid 7818] <... mkdir resumed>) = 0 [pid 7818] mount("/dev/loop4", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 7819] <... ioctl resumed>) = 0 [pid 7819] close(3) = 0 [pid 7819] close(4) = 0 [pid 7819] mkdir("./file0", 0777) = 0 [ 176.832742][ T7816] BTRFS info (device loop2): using free-space-tree [ 176.840138][ T7819] loop3: detected capacity change from 0 to 32768 [ 176.849107][ T7818] BTRFS: device /dev/loop4 (7:4) using temp-fsid 261af76b-41b7-45ab-98a8-c313acffece1 [ 176.874870][ T7818] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor337 (7818) [pid 7819] mount("/dev/loop3", "./file0", "btrfs", MS_NOSUID|MS_I_VERSION, "barrier,compress-force=zlib,max_inline=69p_6,treelog," [pid 5240] <... umount2 resumed>) = 0 [pid 5240] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 176.918426][ T7819] BTRFS: device /dev/loop3 (7:3) using temp-fsid 86268c18-19f4-4287-9280-1e94632f1f84 [ 176.928171][ T7818] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 176.950655][ T7819] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor337 (7819) [pid 5240] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5240] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5240] close(4) = 0 [ 176.967883][ T7818] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 177.002026][ T7818] BTRFS info (device loop4): using free-space-tree [pid 5240] rmdir("./27/file0") = 0 [pid 5240] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5240] rmdir("./27") = 0 [pid 5240] mkdir("./28", 0777) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5240] close(3) = 0 [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7868 attached , child_tidptr=0x55558b77b750) = 7868 [pid 7868] set_robust_list(0x55558b77b760, 24 [pid 7813] <... mount resumed>) = 0 [pid 7868] <... set_robust_list resumed>) = 0 [pid 7813] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7813] chdir("./file0") = 0 [pid 7868] chdir("./28" [pid 7813] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7868] <... chdir resumed>) = 0 [pid 7868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7813] <... openat resumed>) = 4 [pid 7813] ioctl(4, LOOP_CLR_FD [pid 7868] <... prctl resumed>) = 0 [pid 7813] <... ioctl resumed>) = 0 [pid 7868] setpgid(0, 0 [pid 7813] close(4 [pid 7868] <... setpgid resumed>) = 0 [pid 7813] <... close resumed>) = 0 [pid 7868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7813] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7812] <... futex resumed>) = 0 [pid 7813] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7812] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7812] <... futex resumed>) = 0 [pid 7813] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7812] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7868] <... openat resumed>) = 3 [pid 7813] <... openat resumed>) = 4 [pid 7868] write(3, "1000", 4) = 4 [pid 7868] close(3 [pid 7813] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7812] <... futex resumed>) = 0 [pid 7813] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7812] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] <... fallocate resumed>) = 0 [pid 7812] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7813] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] <... close resumed>) = 0 [pid 7813] <... futex resumed>) = 1 [pid 7812] <... futex resumed>) = 0 [pid 7813] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7868] symlink("/dev/binderfs", "./binderfs" [ 177.027563][ T7819] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 177.049342][ T7819] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 177.058939][ T7819] BTRFS info (device loop3): using free-space-tree [pid 7812] exit_group(0executing program [pid 7868] <... symlink resumed>) = 0 [pid 7813] <... futex resumed>) = ? [pid 7812] <... exit_group resumed>) = ? [pid 7868] write(1, "executing program\n", 18) = 18 [pid 7868] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7868] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7813] +++ exited with 0 +++ [pid 7812] +++ exited with 0 +++ [pid 7868] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5241] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7812, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5241] restart_syscall(<... resuming interrupted clone ...> [pid 7868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7816] <... mount resumed>) = 0 [pid 5241] <... restart_syscall resumed>) = 0 [pid 5241] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7816] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5241] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, [pid 7816] <... openat resumed>) = 3 [pid 5241] <... getdents64 resumed>0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5241] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7816] chdir("./file0" [pid 5241] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7816] <... chdir resumed>) = 0 [pid 7868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7816] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5241] unlink("./27/binderfs" [pid 7868] <... mmap resumed>) = 0x7f511f01f000 [pid 7816] <... openat resumed>) = 4 [pid 5241] <... unlink resumed>) = 0 [pid 7816] ioctl(4, LOOP_CLR_FD [pid 7868] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE [pid 7816] <... ioctl resumed>) = 0 [pid 5241] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7816] close(4 [pid 7868] <... mprotect resumed>) = 0 [pid 7816] <... close resumed>) = 0 [pid 7868] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7816] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7816] <... futex resumed>) = 1 [pid 7814] <... futex resumed>) = 0 [pid 7868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} [pid 7816] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7814] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7814] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7885 attached [pid 7868] <... clone3 resumed> => {parent_tid=[7885]}, 88) = 7885 [pid 7816] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7814] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7885] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053 [pid 7868] rt_sigprocmask(SIG_SETMASK, [], [pid 7885] <... rseq resumed>) = 0 [pid 7868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7885] set_robust_list(0x7f511f03f9a0, 24 [pid 7868] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] <... set_robust_list resumed>) = 0 [pid 7885] rt_sigprocmask(SIG_SETMASK, [], [pid 7868] <... futex resumed>) = 0 [pid 7816] <... openat resumed>) = 4 [pid 7816] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7816] <... futex resumed>) = 1 [pid 7814] <... futex resumed>) = 0 [pid 7816] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7814] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] <... fallocate resumed>) = 0 [pid 7814] <... futex resumed>) = 0 [pid 7816] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7814] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7816] <... futex resumed>) = 0 [pid 7814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7816] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7814] exit_group(0 [pid 7816] <... futex resumed>) = ? [pid 7814] <... exit_group resumed>) = ? [pid 7816] +++ exited with 0 +++ [pid 7814] +++ exited with 0 +++ [ 177.174509][ T5241] BTRFS info (device loop1): last unmount of filesystem 2e3c267a-e398-42ce-8820-7b0b67121db3 [ 177.186412][ T5241] assertion failed: list_empty(&fs_info->delayed_iputs), in fs/btrfs/disk-io.c:4332 [ 177.196380][ T5241] ------------[ cut here ]------------ [ 177.202012][ T5241] kernel BUG at fs/btrfs/disk-io.c:4332! [ 177.208099][ T5241] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 177.215064][ T5241] CPU: 1 UID: 0 PID: 5241 Comm: syz-executor337 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 177.226176][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.236228][ T5241] RIP: 0010:close_ctree+0x91f/0xd60 [ 177.241438][ T5241] Code: e9 18 f9 ff ff e8 91 9c da f5 48 c7 c7 c0 31 4c 8c 48 c7 c6 60 61 4c 8c 48 c7 c2 40 32 4c 8c b9 ec 10 00 00 e8 02 9d ff ff 90 <0f> 0b e8 6a 9c da f5 48 c7 c7 c0 31 4c 8c 48 c7 c6 00 62 4c 8c 48 [ 177.261031][ T5241] RSP: 0018:ffffc90003e37a40 EFLAGS: 00010246 [ 177.267109][ T5241] RAX: 0000000000000051 RBX: ffff8880118b8d38 RCX: 387426f946be5200 [ 177.275078][ T5241] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 177.283045][ T5241] RBP: ffffc90003e37be0 R08: ffffffff8174af1c R09: 1ffff920007c6ee4 [ 177.291009][ T5241] R10: dffffc0000000000 R11: fffff520007c6ee5 R12: ffff8880118b8000 [ 177.298974][ T5241] R13: ffff8880118b8fa0 R14: 1ffff11002317272 R15: 0000000000000000 [ 177.306937][ T5241] FS: 000055558b77b480(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 177.315855][ T5241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.322427][ T5241] CR2: 00007f511f044b30 CR3: 000000007e0a6000 CR4: 00000000003526f0 [ 177.330401][ T5241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.338370][ T5241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.346339][ T5241] Call Trace: [ 177.349613][ T5241] [ 177.352532][ T5241] ? __die_body+0x5f/0xb0 [ 177.356866][ T5241] ? die+0x9e/0xc0 [ 177.360573][ T5241] ? do_trap+0x15a/0x3a0 [ 177.364810][ T5241] ? close_ctree+0x91f/0xd60 [ 177.369387][ T5241] ? do_error_trap+0x1dc/0x2c0 [ 177.374256][ T5241] ? close_ctree+0x91f/0xd60 [ 177.378840][ T5241] ? close_ctree+0x91f/0xd60 [ 177.383682][ T5241] ? __pfx_do_error_trap+0x10/0x10 [ 177.388871][ T5241] ? report_bug+0x3e8/0x500 [ 177.393367][ T5241] ? handle_invalid_op+0x34/0x40 [ 177.398293][ T5241] ? close_ctree+0x91f/0xd60 [ 177.402869][ T5241] ? exc_invalid_op+0x38/0x50 [ 177.407530][ T5241] ? asm_exc_invalid_op+0x1a/0x20 [ 177.412545][ T5241] ? __wake_up_klogd+0xcc/0x110 [ 177.417391][ T5241] ? close_ctree+0x91f/0xd60 [ 177.421972][ T5241] ? hook_sb_delete+0x888/0xbd0 [ 177.426822][ T5241] ? __pfx_close_ctree+0x10/0x10 [ 177.431744][ T5241] ? f2fs_allocate_data_block+0x26a1/0x4060 [ 177.437633][ T5241] ? __pfx_hook_sb_delete+0x10/0x10 [ 177.442832][ T5241] ? __pfx_evict_inodes+0x10/0x10 [ 177.447847][ T5241] ? btrfs_attach_transaction_barrier+0x34/0xa0 [ 177.454082][ T5241] ? btrfs_sync_fs+0x1d4/0x700 [ 177.458835][ T5241] ? __pfx_btrfs_put_super+0x10/0x10 [ 177.464112][ T5241] generic_shutdown_super+0x139/0x2d0 [ 177.469474][ T5241] kill_anon_super+0x3b/0x70 [ 177.474056][ T5241] btrfs_kill_super+0x41/0x50 [ 177.478723][ T5241] deactivate_locked_super+0xc4/0x130 [ 177.484084][ T5241] cleanup_mnt+0x41f/0x4b0 [ 177.488489][ T5241] ? lockdep_hardirqs_on+0x99/0x150 [ 177.493679][ T5241] task_work_run+0x24f/0x310 [ 177.498258][ T5241] ? __pfx_task_work_run+0x10/0x10 [ 177.503356][ T5241] ? path_umount+0x284/0xf70 [ 177.507938][ T5241] ptrace_notify+0x2d2/0x380 [ 177.512515][ T5241] ? __pfx_path_umount+0x10/0x10 [ 177.517443][ T5241] ? __pfx_ptrace_notify+0x10/0x10 [ 177.522545][ T5241] ? __x64_sys_umount+0x123/0x170 [ 177.527561][ T5241] ? __pfx___x64_sys_umount+0x10/0x10 [ 177.532924][ T5241] syscall_exit_work+0xc6/0x190 [ 177.537759][ T5241] syscall_exit_to_user_mode+0x279/0x370 [ 177.543380][ T5241] do_syscall_64+0x100/0x230 [ 177.547958][ T5241] ? clear_bhb_loop+0x35/0x90 [ 177.552621][ T5241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.558512][ T5241] RIP: 0033:0x7f511f092517 [ 177.562919][ T5241] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 177.582511][ T5241] RSP: 002b:00007fff0b8d2f18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 177.590912][ T5241] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f511f092517 [ 177.598872][ T5241] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0b8d2fd0 [ 177.606829][ T5241] RBP: 00007fff0b8d2fd0 R08: 0000000000000000 R09: 0000000000000000 [ 177.614784][ T5241] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff0b8d4090 [pid 7885] memfd_create("syzkaller", 0) = 3 [pid 7885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5242] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7814, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 7885] <... mmap resumed>) = 0x7f5116c00000 [pid 5242] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 177.622742][ T5241] R13: 000055558b77c7c0 R14: 431bde82d7b634db R15: 00007fff0b8d4034 [ 177.630712][ T5241] [ 177.633717][ T5241] Modules linked in: [ 177.637810][ T5241] ---[ end trace 0000000000000000 ]--- [pid 5242] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5242] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] unlink("./29/binderfs") = 0 [ 177.715383][ T5241] RIP: 0010:close_ctree+0x91f/0xd60 [ 177.721314][ T5242] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 177.732771][ T5241] Code: e9 18 f9 ff ff e8 91 9c da f5 48 c7 c7 c0 31 4c 8c 48 c7 c6 60 61 4c 8c 48 c7 c2 40 32 4c 8c b9 ec 10 00 00 e8 02 9d ff ff 90 <0f> 0b e8 6a 9c da f5 48 c7 c7 c0 31 4c 8c 48 c7 c6 00 62 4c 8c 48 [pid 5242] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7818] <... mount resumed>) = 0 [pid 7818] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7818] chdir("./file0") = 0 [pid 7818] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7818] ioctl(4, LOOP_CLR_FD) = 0 [pid 7818] close(4) = 0 [pid 7818] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7815] <... futex resumed>) = 0 [pid 7818] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7815] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7815] <... futex resumed>) = 0 [pid 7818] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777 [pid 7815] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7818] <... openat resumed>) = 4 [pid 7818] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7815] <... futex resumed>) = 0 [ 177.769692][ T5241] RSP: 0018:ffffc90003e37a40 EFLAGS: 00010246 [ 177.795208][ T5241] RAX: 0000000000000051 RBX: ffff8880118b8d38 RCX: 387426f946be5200 [pid 7818] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7815] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7818] <... fallocate resumed>) = 0 [pid 7815] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7818] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7815] <... futex resumed>) = 0 [pid 7818] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7815] exit_group(0) = ? [pid 7818] <... futex resumed>) = ? [pid 7818] +++ exited with 0 +++ [pid 7815] +++ exited with 0 +++ [pid 5244] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7815, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5244] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5244] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5244] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5244] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5244] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5244] unlink("./28/binderfs") = 0 [pid 5244] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7819] <... mount resumed>) = 0 [pid 7819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7819] chdir("./file0") = 0 [pid 7819] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7819] ioctl(4, LOOP_CLR_FD) = 0 [pid 7819] close(4) = 0 [pid 7819] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7817] <... futex resumed>) = 0 [pid 7817] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7817] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7819] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_APPEND|O_SYNC, 0777) = 4 [pid 7819] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7817] <... futex resumed>) = 0 [pid 7819] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 1, 5 [pid 7817] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] <... fallocate resumed>) = 0 [pid 7819] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7817] <... futex resumed>) = 0 [pid 7819] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7817] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7817] exit_group(0 [pid 7819] <... futex resumed>) = ? [pid 7817] <... exit_group resumed>) = ? [pid 7819] +++ exited with 0 +++ [pid 7817] +++ exited with 0 +++ [pid 5243] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7817, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 5243] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5243] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(3, 0x55558b77c7f0 /* 4 entries */, 32768) = 112 [pid 5243] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] unlink("./28/binderfs") = 0 [ 177.864225][ T5241] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 177.894496][ T5244] BTRFS info (device loop4): last unmount of filesystem 261af76b-41b7-45ab-98a8-c313acffece1 [ 177.906421][ T5241] RBP: ffffc90003e37be0 R08: ffffffff8174af1c R09: 1ffff920007c6ee4 [pid 5243] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5243] <... umount2 resumed>) = 0 [pid 5243] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 177.936031][ T5241] R10: dffffc0000000000 R11: fffff520007c6ee5 R12: ffff8880118b8000 [ 177.940642][ T5243] BTRFS info (device loop3): last unmount of filesystem 86268c18-19f4-4287-9280-1e94632f1f84 [ 177.950266][ T5241] R13: ffff8880118b8fa0 R14: 1ffff11002317272 R15: 0000000000000000 [ 177.975340][ T5241] FS: 000055558b77b480(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [pid 5243] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5243] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5243] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5243] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5243] close(4) = 0 [pid 5243] rmdir("./28/file0") = 0 [pid 5243] getdents64(3, [pid 5242] <... umount2 resumed>) = 0 [pid 5243] <... getdents64 resumed>0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5243] close(3executing program ) = 0 [pid 5242] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] rmdir("./28") = 0 [pid 5243] mkdir("./29", 0777) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5243] ioctl(3, LOOP_CLR_FD) = 0 [pid 5243] close(3) = 0 [pid 5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558b77b750) = 7905 [pid 5242] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5242] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5242] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(4, 0x55558b784830 /* 2 entries */, 32768) = 48 [pid 5242] getdents64(4, 0x55558b784830 /* 0 entries */, 32768) = 0 [pid 5242] close(4) = 0 [pid 5242] rmdir("./29/file0") = 0 [pid 5242] getdents64(3, 0x55558b77c7f0 /* 0 entries */, 32768) = 0 [pid 5242] close(3./strace-static-x86_64: Process 7905 attached ) = 0 [pid 5242] rmdir("./29") = 0 [pid 5242] mkdir("./30", 0777) = 0 [pid 7905] set_robust_list(0x55558b77b760, 24 [pid 5242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7905] <... set_robust_list resumed>) = 0 [pid 7905] chdir("./29" [pid 5242] <... openat resumed>) = 3 [pid 5242] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5242] close(3 [pid 7905] <... chdir resumed>) = 0 [pid 5242] <... close resumed>) = 0 [pid 7905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7905] setpgid(0, 0) = 0 [pid 7905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7905] write(3, "1000", 4) = 4 [pid 7905] close(3) = 0 [pid 7905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7905] write(1, "executing program\n", 18) = 18 [pid 7905] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7905] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, [pid 5242] <... clone resumed>, child_tidptr=0x55558b77b750) = 7906 [pid 7905] <... rt_sigaction resumed>NULL, 8) = 0 [pid 7905] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7905] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 7906 attached [pid 7905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0} => {parent_tid=[7907]}, 88) = 7907 ./strace-static-x86_64: Process 7907 attached [pid 7905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7905] futex(0x7f511f1176c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7905] futex(0x7f511f1176cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7907] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7907] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7907] memfd_create("syzkaller", 0) = 3 [pid 7906] set_robust_list(0x55558b77b760, 24 [ 178.012611][ T5241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 7907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5116c00000 [pid 7906] <... set_robust_list resumed>) = 0 [pid 7906] chdir("./30") = 0 [pid 7906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7906] setpgid(0, 0) = 0 [pid 7906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7906] write(3, "1000", 4) = 4 [pid 7906] close(3) = 0 [pid 7906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7906] write(1, "executing program\n", 18executing program ) = 18 [pid 7906] futex(0x7f511f1176cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7906] rt_sigaction(SIGRT_1, {sa_handler=0x7f511f0b88b0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f511f058fb0}, NULL, 8) = 0 [pid 7906] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f511f01f000 [pid 7906] mprotect(0x7f511f020000, 131072, PROT_READ|PROT_WRITE) = 0 [ 178.056476][ T5241] CR2: 00007ffe82c56ff8 CR3: 000000007e0a6000 CR4: 00000000003526f0 [ 178.076904][ T5241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 7906] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f511f03f990, parent_tid=0x7f511f03f990, exit_signal=0, stack=0x7f511f01f000, stack_size=0x20240, tls=0x7f511f03f6c0}./strace-static-x86_64: Process 7908 attached => {parent_tid=[7908]}, 88) = 7908 [pid 7908] rseq(0x7f511f03ffe0, 0x20, 0, 0x53053053) = 0 [pid 7908] set_robust_list(0x7f511f03f9a0, 24) = 0 [pid 7908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7908] futex(0x7f511f1176c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 178.102583][ T5241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.134332][ T5241] Kernel panic - not syncing: Fatal exception [ 178.140633][ T5241] Kernel Offset: disabled [ 178.144961][ T5241] Rebooting in 86400 seconds..