./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3181433555 <...> Warning: Permanently added '10.128.1.79' (ECDSA) to the list of known hosts. execve("./syz-executor3181433555", ["./syz-executor3181433555"], 0x7ffec874e4d0 /* 10 vars */) = 0 brk(NULL) = 0x555557123000 brk(0x555557123c40) = 0x555557123c40 arch_prctl(ARCH_SET_FS, 0x555557123300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555571235d0) = 5006 set_robust_list(0x5555571235e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fd090fd9090, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fd090fd9760}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fd090fd9130, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd090fd9760}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3181433555", 4096) = 28 brk(0x555557144c40) = 0x555557144c40 brk(0x555557145000) = 0x555557145000 mprotect(0x7fd0910a0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 syzkaller login: [ 80.706744][ T5006] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 80.856185][ T5006] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 getpid() = 5006 mkdir("./syzkaller.ys7LkJ", 0700) = 0 chmod("./syzkaller.ys7LkJ", 0777) = 0 chdir("./syzkaller.ys7LkJ") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5007 attached , child_tidptr=0x5555571235d0) = 5007 [pid 5007] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5007] setsid() = 1 [pid 5007] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5007] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5007] unshare(CLONE_NEWNS) = 0 [pid 5007] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5007] unshare(CLONE_NEWIPC) = 0 [pid 5007] unshare(CLONE_NEWCGROUP) = 0 [pid 5007] unshare(CLONE_NEWUTS) = 0 [pid 5007] unshare(CLONE_SYSVSEM) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "16777216", 8) = 8 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "536870912", 9) = 9 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "8192", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024", 4) = 4 [pid 5007] close(3) = 0 [pid 5007] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5007] close(3) = 0 [pid 5007] getpid() = 1 [pid 5007] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5011] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5011] memfd_create("syzkaller", 0) = 3 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [ 81.108235][ T5011] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5011 'syz-executor318' [pid 5011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5011] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5011] close(3) = 0 [pid 5011] mkdir("./file0", 0777) = 0 [ 81.339153][ T5011] loop0: detected capacity change from 0 to 32768 [ 81.354686][ T5011] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5011) [ 81.380755][ T5011] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [pid 5011] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5011] chdir("./file0") = 0 [pid 5011] ioctl(4, LOOP_CLR_FD) = 0 [pid 5011] close(4) = 0 [pid 5011] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... openat resumed>) = 4 [pid 5011] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5011] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... futex resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5011] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 81.389816][ T5011] BTRFS info (device loop0): using free space tree [ 81.414923][ T5011] BTRFS info (device loop0): enabling ssd optimizations [ 81.422250][ T5011] BTRFS info (device loop0): auto enabling async discard [pid 5009] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5009] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5009] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5028 attached [pid 5028] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5028] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... clone resumed>, parent_tid=[4], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 4 [pid 5009] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5028] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5028] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5009] <... futex resumed>) = 0 [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5009] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 81.506475][ T5011] BTRFS info (device loop0): balance: start -s [ 81.539065][ T5011] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5028] <... ioctl resumed>) = 0 [pid 5028] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] close(3) = 0 [pid 5009] close(4) = 0 [pid 5009] close(5) = 0 [pid 5009] close(6) = -1 EBADF (Bad file descriptor) [pid 5009] close(7) = -1 EBADF (Bad file descriptor) [pid 5009] close(8) = -1 EBADF (Bad file descriptor) [pid 5009] close(9) = -1 EBADF (Bad file descriptor) [pid 5009] close(10) = -1 EBADF (Bad file descriptor) [pid 5009] close(11) = -1 EBADF (Bad file descriptor) [pid 5009] close(12) = -1 EBADF (Bad file descriptor) [pid 5009] close(13) = -1 EBADF (Bad file descriptor) [pid 5009] close(14) = -1 EBADF (Bad file descriptor) [pid 5009] close(15) = -1 EBADF (Bad file descriptor) [pid 5009] close(16) = -1 EBADF (Bad file descriptor) [pid 5009] close(17) = -1 EBADF (Bad file descriptor) [pid 5009] close(18) = -1 EBADF (Bad file descriptor) [pid 5009] close(19) = -1 EBADF (Bad file descriptor) [pid 5009] close(20) = -1 EBADF (Bad file descriptor) [pid 5009] close(21) = -1 EBADF (Bad file descriptor) [pid 5009] close(22) = -1 EBADF (Bad file descriptor) [pid 5009] close(23) = -1 EBADF (Bad file descriptor) [pid 5009] close(24) = -1 EBADF (Bad file descriptor) [pid 5009] close(25) = -1 EBADF (Bad file descriptor) [pid 5009] close(26) = -1 EBADF (Bad file descriptor) [pid 5009] close(27) = -1 EBADF (Bad file descriptor) [pid 5009] close(28) = -1 EBADF (Bad file descriptor) [pid 5009] close(29) = -1 EBADF (Bad file descriptor) [pid 5009] exit_group(0 [pid 5028] <... futex resumed>) = ? [pid 5009] <... exit_group resumed>) = ? [pid 5028] +++ exited with 0 +++ [pid 5011] <... ioctl resumed> ) = ? [pid 5011] +++ exited with 0 +++ [pid 5009] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=41 /* 0.41 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./0/cgroup.cpu") = 0 [pid 5007] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./0/binderfs") = 0 [ 81.718408][ T5011] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./0/file0") = 0 [pid 5007] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./0/cgroup") = 0 [pid 5007] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./0/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./0") = 0 [pid 5007] mkdir("./1", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5036 attached [pid 5036] set_robust_list(0x5555571235e0, 24) = 0 [pid 5036] chdir("./1") = 0 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5036] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 5 [pid 5036] <... symlink resumed>) = 0 [pid 5036] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5036] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5036] write(3, "1000", 4) = 4 [pid 5036] close(3) = 0 [pid 5036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5036] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5036] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 6 [pid 5036] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5037 attached [pid 5037] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5037] memfd_create("syzkaller", 0) = 3 [pid 5037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5037] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5037] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5037] close(3) = 0 [pid 5037] mkdir("./file0", 0777) = 0 [ 82.120247][ T5037] loop0: detected capacity change from 0 to 32768 [ 82.131613][ T5037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5037) [ 82.150812][ T5037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.159737][ T5037] BTRFS info (device loop0): using free space tree [pid 5037] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5037] chdir("./file0") = 0 [pid 5037] ioctl(4, LOOP_CLR_FD) = 0 [pid 5037] close(4) = 0 [pid 5037] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] <... futex resumed>) = 0 [pid 5037] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5036] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... openat resumed>) = 4 [pid 5036] <... futex resumed>) = 0 [pid 5037] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] <... futex resumed>) = 0 [pid 5036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5037] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5036] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.180611][ T5037] BTRFS info (device loop0): enabling ssd optimizations [ 82.188300][ T5037] BTRFS info (device loop0): auto enabling async discard [ 82.218735][ T5037] BTRFS info (device loop0): balance: start -s [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5036] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5036] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5036] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x7fd089ba69e0, 24 [pid 5036] <... clone resumed>, parent_tid=[7], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 7 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5036] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] openat(AT_FDCWD, ".", O_RDONLY [pid 5036] <... futex resumed>) = 0 [pid 5036] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] <... openat resumed>) = 5 [pid 5053] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5036] <... futex resumed>) = 0 [pid 5053] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5036] <... futex resumed>) = 0 [ 82.228248][ T5037] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5053] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5036] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 82.283368][ T5037] BTRFS info (device loop0): balance: ended with status: 0 [pid 5053] <... ioctl resumed>) = 0 [pid 5053] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5053] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] close(3) = 0 [pid 5036] close(4) = 0 [pid 5036] close(5) = 0 [pid 5036] close(6) = -1 EBADF (Bad file descriptor) [pid 5036] close(7) = -1 EBADF (Bad file descriptor) [pid 5036] close(8) = -1 EBADF (Bad file descriptor) [pid 5036] close(9) = -1 EBADF (Bad file descriptor) [pid 5036] close(10) = -1 EBADF (Bad file descriptor) [pid 5036] close(11) = -1 EBADF (Bad file descriptor) [pid 5036] close(12) = -1 EBADF (Bad file descriptor) [pid 5036] close(13) = -1 EBADF (Bad file descriptor) [pid 5036] close(14) = -1 EBADF (Bad file descriptor) [pid 5036] close(15) = -1 EBADF (Bad file descriptor) [pid 5036] close(16) = -1 EBADF (Bad file descriptor) [pid 5036] close(17) = -1 EBADF (Bad file descriptor) [pid 5036] close(18) = -1 EBADF (Bad file descriptor) [pid 5036] close(19) = -1 EBADF (Bad file descriptor) [pid 5036] close(20) = -1 EBADF (Bad file descriptor) [pid 5036] close(21) = -1 EBADF (Bad file descriptor) [pid 5036] close(22) = -1 EBADF (Bad file descriptor) [pid 5036] close(23) = -1 EBADF (Bad file descriptor) [pid 5036] close(24) = -1 EBADF (Bad file descriptor) [pid 5036] close(25) = -1 EBADF (Bad file descriptor) [pid 5036] close(26) = -1 EBADF (Bad file descriptor) [pid 5036] close(27) = -1 EBADF (Bad file descriptor) [pid 5036] close(28) = -1 EBADF (Bad file descriptor) [pid 5036] close(29) = -1 EBADF (Bad file descriptor) [pid 5036] exit_group(0 [pid 5053] <... futex resumed>) = ? [pid 5037] <... futex resumed>) = ? [pid 5036] <... exit_group resumed>) = ? [pid 5053] +++ exited with 0 +++ [pid 5037] +++ exited with 0 +++ [pid 5036] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./1/cgroup.cpu") = 0 [pid 5007] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./1/binderfs") = 0 [pid 5007] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./1/file0") = 0 [pid 5007] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./1/cgroup") = 0 [pid 5007] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./1/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./1") = 0 [pid 5007] mkdir("./2", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 8 ./strace-static-x86_64: Process 5061 attached [pid 5061] set_robust_list(0x5555571235e0, 24) = 0 [pid 5061] chdir("./2") = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5061] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5061] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5061] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5061] <... clone resumed>, parent_tid=[9], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 9 [pid 5062] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] memfd_create("syzkaller", 0) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5062] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file0", 0777) = 0 [ 82.831700][ T5062] loop0: detected capacity change from 0 to 32768 [ 82.842819][ T5062] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5062) [ 82.858519][ T5062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.867436][ T5062] BTRFS info (device loop0): using free space tree [pid 5062] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file0") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [pid 5062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... futex resumed>) = 1 [pid 5062] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... futex resumed>) = 1 [ 82.890157][ T5062] BTRFS info (device loop0): enabling ssd optimizations [ 82.897425][ T5062] BTRFS info (device loop0): auto enabling async discard [pid 5062] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5061] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5061] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[10], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 10 [pid 5061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5079] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] <... futex resumed>) = 0 [pid 5079] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] <... futex resumed>) = 0 [pid 5079] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 82.955902][ T5062] BTRFS info (device loop0): balance: start -s [ 82.966106][ T5062] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 83.026914][ T5062] BTRFS info (device loop0): balance: ended with status: 0 [pid 5079] <... ioctl resumed>) = 0 [pid 5079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5061] close(3) = 0 [pid 5061] close(4) = 0 [pid 5061] close(5) = 0 [pid 5061] close(6) = -1 EBADF (Bad file descriptor) [pid 5061] close(7) = -1 EBADF (Bad file descriptor) [pid 5061] close(8) = -1 EBADF (Bad file descriptor) [pid 5061] close(9) = -1 EBADF (Bad file descriptor) [pid 5061] close(10) = -1 EBADF (Bad file descriptor) [pid 5061] close(11) = -1 EBADF (Bad file descriptor) [pid 5061] close(12) = -1 EBADF (Bad file descriptor) [pid 5061] close(13) = -1 EBADF (Bad file descriptor) [pid 5061] close(14) = -1 EBADF (Bad file descriptor) [pid 5061] close(15) = -1 EBADF (Bad file descriptor) [pid 5061] close(16) = -1 EBADF (Bad file descriptor) [pid 5061] close(17) = -1 EBADF (Bad file descriptor) [pid 5061] close(18) = -1 EBADF (Bad file descriptor) [pid 5061] close(19) = -1 EBADF (Bad file descriptor) [pid 5061] close(20) = -1 EBADF (Bad file descriptor) [pid 5061] close(21) = -1 EBADF (Bad file descriptor) [pid 5061] close(22) = -1 EBADF (Bad file descriptor) [pid 5061] close(23) = -1 EBADF (Bad file descriptor) [pid 5061] close(24) = -1 EBADF (Bad file descriptor) [pid 5061] close(25) = -1 EBADF (Bad file descriptor) [pid 5061] close(26) = -1 EBADF (Bad file descriptor) [pid 5061] close(27) = -1 EBADF (Bad file descriptor) [pid 5061] close(28) = -1 EBADF (Bad file descriptor) [pid 5061] close(29) = -1 EBADF (Bad file descriptor) [pid 5061] exit_group(0 [pid 5079] <... futex resumed>) = ? [pid 5062] <... futex resumed>) = ? [pid 5061] <... exit_group resumed>) = ? [pid 5079] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- [pid 5007] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./2/cgroup.cpu") = 0 [pid 5007] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./2/binderfs") = 0 [pid 5007] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./2/file0") = 0 [pid 5007] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./2/cgroup") = 0 [pid 5007] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./2/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./2") = 0 [pid 5007] mkdir("./3", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 11 ./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x5555571235e0, 24) = 0 [pid 5080] chdir("./3") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5080] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5080] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5080] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5081 attached [pid 5081] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... clone resumed>, parent_tid=[12], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 12 [pid 5080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = 0 [pid 5080] <... futex resumed>) = 1 [pid 5081] memfd_create("syzkaller", 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... memfd_create resumed>) = 3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5081] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5081] close(3) = 0 [pid 5081] mkdir("./file0", 0777) = 0 [ 83.516421][ T5081] loop0: detected capacity change from 0 to 32768 [ 83.527823][ T5081] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5081) [ 83.546037][ T5081] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 83.554896][ T5081] BTRFS info (device loop0): using free space tree [pid 5081] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] chdir("./file0") = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] close(4) = 0 [pid 5081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 1 [pid 5081] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 1 [ 83.573832][ T5081] BTRFS info (device loop0): enabling ssd optimizations [ 83.581057][ T5081] BTRFS info (device loop0): auto enabling async discard [pid 5081] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5080] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... clone resumed>, parent_tid=[13], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 13 [pid 5080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5080] <... futex resumed>) = 0 [ 83.624897][ T5081] BTRFS info (device loop0): balance: start -s [ 83.634745][ T5081] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 83.732623][ T5081] BTRFS info (device loop0): balance: ended with status: 0 [pid 5098] <... ioctl resumed>) = 0 [pid 5098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] close(3) = 0 [pid 5080] close(4) = 0 [pid 5080] close(5) = 0 [pid 5080] close(6) = -1 EBADF (Bad file descriptor) [pid 5080] close(7) = -1 EBADF (Bad file descriptor) [pid 5080] close(8) = -1 EBADF (Bad file descriptor) [pid 5080] close(9) = -1 EBADF (Bad file descriptor) [pid 5080] close(10) = -1 EBADF (Bad file descriptor) [pid 5080] close(11) = -1 EBADF (Bad file descriptor) [pid 5080] close(12) = -1 EBADF (Bad file descriptor) [pid 5080] close(13) = -1 EBADF (Bad file descriptor) [pid 5080] close(14) = -1 EBADF (Bad file descriptor) [pid 5080] close(15) = -1 EBADF (Bad file descriptor) [pid 5080] close(16) = -1 EBADF (Bad file descriptor) [pid 5080] close(17) = -1 EBADF (Bad file descriptor) [pid 5080] close(18) = -1 EBADF (Bad file descriptor) [pid 5080] close(19) = -1 EBADF (Bad file descriptor) [pid 5080] close(20) = -1 EBADF (Bad file descriptor) [pid 5080] close(21) = -1 EBADF (Bad file descriptor) [pid 5080] close(22) = -1 EBADF (Bad file descriptor) [pid 5080] close(23) = -1 EBADF (Bad file descriptor) [pid 5080] close(24) = -1 EBADF (Bad file descriptor) [pid 5080] close(25) = -1 EBADF (Bad file descriptor) [pid 5080] close(26) = -1 EBADF (Bad file descriptor) [pid 5080] close(27) = -1 EBADF (Bad file descriptor) [pid 5080] close(28) = -1 EBADF (Bad file descriptor) [pid 5080] close(29) = -1 EBADF (Bad file descriptor) [pid 5080] exit_group(0 [pid 5098] <... futex resumed>) = ? [pid 5081] <... futex resumed>) = ? [pid 5080] <... exit_group resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5081] +++ exited with 0 +++ [pid 5080] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./3/cgroup.cpu") = 0 [pid 5007] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./3/binderfs") = 0 [pid 5007] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./3/file0") = 0 [pid 5007] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./3/cgroup") = 0 [pid 5007] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./3/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./3") = 0 [pid 5007] mkdir("./4", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 14 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5099] chdir("./4") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5099] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5099] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5099] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[15], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 15 [pid 5099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5100] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 84.236031][ T5100] loop0: detected capacity change from 0 to 32768 [ 84.246214][ T5100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5100) [ 84.263546][ T5100] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 84.272365][ T5100] BTRFS info (device loop0): using free space tree [pid 5100] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5100] chdir("./file0") = 0 [pid 5100] ioctl(4, LOOP_CLR_FD) = 0 [pid 5100] close(4) = 0 [pid 5100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5100] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... openat resumed>) = 4 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5100] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 84.292186][ T5100] BTRFS info (device loop0): enabling ssd optimizations [ 84.299440][ T5100] BTRFS info (device loop0): auto enabling async discard [pid 5099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5099] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5099] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[16], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 16 [pid 5099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5117 attached [pid 5117] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5117] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... futex resumed>) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [ 84.343917][ T5100] BTRFS info (device loop0): balance: start -s [ 84.353889][ T5100] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5117] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5100] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 84.399544][ T5100] BTRFS info (device loop0): balance: ended with status: 0 [pid 5117] <... ioctl resumed>) = 0 [pid 5117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] close(3) = 0 [pid 5099] close(4) = 0 [pid 5099] close(5) = 0 [pid 5099] close(6) = -1 EBADF (Bad file descriptor) [pid 5099] close(7) = -1 EBADF (Bad file descriptor) [pid 5099] close(8) = -1 EBADF (Bad file descriptor) [pid 5099] close(9) = -1 EBADF (Bad file descriptor) [pid 5099] close(10) = -1 EBADF (Bad file descriptor) [pid 5099] close(11) = -1 EBADF (Bad file descriptor) [pid 5099] close(12) = -1 EBADF (Bad file descriptor) [pid 5099] close(13) = -1 EBADF (Bad file descriptor) [pid 5099] close(14) = -1 EBADF (Bad file descriptor) [pid 5099] close(15) = -1 EBADF (Bad file descriptor) [pid 5099] close(16) = -1 EBADF (Bad file descriptor) [pid 5099] close(17) = -1 EBADF (Bad file descriptor) [pid 5099] close(18) = -1 EBADF (Bad file descriptor) [pid 5099] close(19) = -1 EBADF (Bad file descriptor) [pid 5099] close(20) = -1 EBADF (Bad file descriptor) [pid 5099] close(21) = -1 EBADF (Bad file descriptor) [pid 5099] close(22) = -1 EBADF (Bad file descriptor) [pid 5099] close(23) = -1 EBADF (Bad file descriptor) [pid 5099] close(24) = -1 EBADF (Bad file descriptor) [pid 5099] close(25) = -1 EBADF (Bad file descriptor) [pid 5099] close(26) = -1 EBADF (Bad file descriptor) [pid 5099] close(27) = -1 EBADF (Bad file descriptor) [pid 5099] close(28) = -1 EBADF (Bad file descriptor) [pid 5099] close(29) = -1 EBADF (Bad file descriptor) [pid 5099] exit_group(0 [pid 5117] <... futex resumed>) = ? [pid 5100] <... futex resumed>) = ? [pid 5099] <... exit_group resumed>) = ? [pid 5100] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./4/cgroup.cpu") = 0 [pid 5007] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./4/binderfs") = 0 [pid 5007] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./4/file0") = 0 [pid 5007] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./4/cgroup") = 0 [pid 5007] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./4/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./4") = 0 [pid 5007] mkdir("./5", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached , child_tidptr=0x5555571235d0) = 17 [pid 5118] set_robust_list(0x5555571235e0, 24) = 0 [pid 5118] chdir("./5") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5118] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5118] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5119 attached , parent_tid=[18], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 18 [pid 5119] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5119] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file0", 0777) = 0 [ 84.913520][ T5119] loop0: detected capacity change from 0 to 32768 [ 84.924570][ T5119] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5119) [ 84.942263][ T5119] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 84.951388][ T5119] BTRFS info (device loop0): using free space tree [pid 5119] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 84.971537][ T5119] BTRFS info (device loop0): enabling ssd optimizations [ 84.979236][ T5119] BTRFS info (device loop0): auto enabling async discard [pid 5118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5118] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5118] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... clone resumed>, parent_tid=[19], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 19 [pid 5118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5136] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.028666][ T5119] BTRFS info (device loop0): balance: start -s [ 85.037692][ T5119] BTRFS info (device loop0): relocating block group 1048576 flags system [ 85.068412][ T5119] BTRFS info (device loop0): balance: ended with status: 0 [pid 5118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5119] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... ioctl resumed>) = 0 [pid 5136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] close(3 [pid 5136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... close resumed>) = 0 [pid 5118] close(4) = 0 [pid 5118] close(5) = 0 [pid 5118] close(6) = -1 EBADF (Bad file descriptor) [pid 5118] close(7) = -1 EBADF (Bad file descriptor) [pid 5118] close(8) = -1 EBADF (Bad file descriptor) [pid 5118] close(9) = -1 EBADF (Bad file descriptor) [pid 5118] close(10) = -1 EBADF (Bad file descriptor) [pid 5118] close(11) = -1 EBADF (Bad file descriptor) [pid 5118] close(12) = -1 EBADF (Bad file descriptor) [pid 5118] close(13) = -1 EBADF (Bad file descriptor) [pid 5118] close(14) = -1 EBADF (Bad file descriptor) [pid 5118] close(15) = -1 EBADF (Bad file descriptor) [pid 5118] close(16) = -1 EBADF (Bad file descriptor) [pid 5118] close(17) = -1 EBADF (Bad file descriptor) [pid 5118] close(18) = -1 EBADF (Bad file descriptor) [pid 5118] close(19) = -1 EBADF (Bad file descriptor) [pid 5118] close(20) = -1 EBADF (Bad file descriptor) [pid 5118] close(21) = -1 EBADF (Bad file descriptor) [pid 5118] close(22) = -1 EBADF (Bad file descriptor) [pid 5118] close(23) = -1 EBADF (Bad file descriptor) [pid 5118] close(24) = -1 EBADF (Bad file descriptor) [pid 5118] close(25) = -1 EBADF (Bad file descriptor) [pid 5118] close(26) = -1 EBADF (Bad file descriptor) [pid 5118] close(27) = -1 EBADF (Bad file descriptor) [pid 5118] close(28) = -1 EBADF (Bad file descriptor) [pid 5118] close(29) = -1 EBADF (Bad file descriptor) [pid 5118] exit_group(0 [pid 5136] <... futex resumed>) = ? [pid 5119] <... futex resumed>) = ? [pid 5136] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 5118] <... exit_group resumed>) = ? [pid 5118] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./5/cgroup.cpu") = 0 [pid 5007] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./5/binderfs") = 0 [pid 5007] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./5/file0") = 0 [pid 5007] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./5/cgroup") = 0 [pid 5007] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./5/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./5") = 0 [pid 5007] mkdir("./6", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 20 ./strace-static-x86_64: Process 5137 attached [pid 5137] set_robust_list(0x5555571235e0, 24) = 0 [pid 5137] chdir("./6") = 0 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5137] setpgid(0, 0) = 0 [pid 5137] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5137] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5137] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5137] write(3, "1000", 4) = 4 [pid 5137] close(3) = 0 [pid 5137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5137] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[21], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 21 [pid 5137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5138] memfd_create("syzkaller", 0) = 3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5138] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5138] close(3) = 0 [pid 5138] mkdir("./file0", 0777) = 0 [ 85.572689][ T5138] loop0: detected capacity change from 0 to 32768 [ 85.584090][ T5138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5138) [ 85.601956][ T5138] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 85.610778][ T5138] BTRFS info (device loop0): using free space tree [pid 5138] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5138] chdir("./file0") = 0 [pid 5138] ioctl(4, LOOP_CLR_FD) = 0 [pid 5138] close(4) = 0 [pid 5138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] <... openat resumed>) = 4 [pid 5138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 85.631458][ T5138] BTRFS info (device loop0): enabling ssd optimizations [ 85.645183][ T5138] BTRFS info (device loop0): auto enabling async discard [pid 5137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5137] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5137] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[22], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 22 ./strace-static-x86_64: Process 5155 attached [pid 5137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 1 [ 85.711591][ T5138] BTRFS info (device loop0): balance: start -s [ 85.727337][ T5138] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5155] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5137] close(3) = 0 [pid 5137] close(4) = 0 [pid 5137] close(5) = 0 [pid 5137] close(6) = -1 EBADF (Bad file descriptor) [pid 5137] close(7) = -1 EBADF (Bad file descriptor) [pid 5137] close(8) = -1 EBADF (Bad file descriptor) [pid 5137] close(9) = -1 EBADF (Bad file descriptor) [pid 5137] close(10) = -1 EBADF (Bad file descriptor) [pid 5137] close(11) = -1 EBADF (Bad file descriptor) [pid 5137] close(12) = -1 EBADF (Bad file descriptor) [pid 5137] close(13) = -1 EBADF (Bad file descriptor) [pid 5137] close(14) = -1 EBADF (Bad file descriptor) [pid 5137] close(15) = -1 EBADF (Bad file descriptor) [pid 5137] close(16) = -1 EBADF (Bad file descriptor) [pid 5137] close(17) = -1 EBADF (Bad file descriptor) [pid 5137] close(18) = -1 EBADF (Bad file descriptor) [pid 5137] close(19) = -1 EBADF (Bad file descriptor) [pid 5137] close(20) = -1 EBADF (Bad file descriptor) [pid 5137] close(21) = -1 EBADF (Bad file descriptor) [pid 5137] close(22) = -1 EBADF (Bad file descriptor) [pid 5137] close(23) = -1 EBADF (Bad file descriptor) [pid 5137] close(24) = -1 EBADF (Bad file descriptor) [pid 5137] close(25) = -1 EBADF (Bad file descriptor) [pid 5137] close(26) = -1 EBADF (Bad file descriptor) [pid 5137] close(27) = -1 EBADF (Bad file descriptor) [pid 5137] close(28) = -1 EBADF (Bad file descriptor) [pid 5137] close(29) = -1 EBADF (Bad file descriptor) [pid 5137] exit_group(0) = ? [pid 5155] <... ioctl resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5138] <... ioctl resumed> ) = ? [pid 5138] +++ exited with 0 +++ [pid 5137] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./6/cgroup.cpu") = 0 [pid 5007] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./6/binderfs") = 0 [ 86.015549][ T5155] BTRFS warning (device loop0): failed to trim 1 block group(s), last error -512 [ 86.037013][ T5138] BTRFS info (device loop0): balance: ended with status: 0 [ 86.045996][ T5155] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [pid 5007] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./6/file0") = 0 [pid 5007] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./6/cgroup") = 0 [pid 5007] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./6/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./6") = 0 [pid 5007] mkdir("./7", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5156 attached [pid 5156] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 23 [pid 5156] <... set_robust_list resumed>) = 0 [pid 5156] chdir("./7") = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5156] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5156] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5156] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5157 attached , parent_tid=[24], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 24 [pid 5157] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5157] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5157] memfd_create("syzkaller", 0 [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5157] <... memfd_create resumed>) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5157] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5157] close(3) = 0 [pid 5157] mkdir("./file0", 0777) = 0 [ 86.425386][ T5157] loop0: detected capacity change from 0 to 32768 [ 86.435621][ T5157] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5157) [ 86.453064][ T5157] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 86.461902][ T5157] BTRFS info (device loop0): using free space tree [pid 5157] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5157] chdir("./file0") = 0 [pid 5157] ioctl(4, LOOP_CLR_FD) = 0 [pid 5157] close(4) = 0 [pid 5157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5157] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] <... openat resumed>) = 4 [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5157] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.483634][ T5157] BTRFS info (device loop0): enabling ssd optimizations [ 86.490684][ T5157] BTRFS info (device loop0): auto enabling async discard [ 86.526738][ T5157] BTRFS info (device loop0): balance: start -s [ 86.536579][ T5157] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5156] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5156] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5156] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5174 attached [pid 5174] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] <... clone resumed>, parent_tid=[25], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 25 [pid 5156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5156] <... futex resumed>) = 1 [pid 5156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.567517][ T5157] BTRFS info (device loop0): balance: ended with status: 0 [pid 5157] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5174] <... ioctl resumed>) = 0 [pid 5174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] close(3) = 0 [pid 5156] close(4) = 0 [pid 5156] close(5) = 0 [pid 5156] close(6) = -1 EBADF (Bad file descriptor) [pid 5156] close(7) = -1 EBADF (Bad file descriptor) [pid 5156] close(8) = -1 EBADF (Bad file descriptor) [pid 5156] close(9) = -1 EBADF (Bad file descriptor) [pid 5156] close(10) = -1 EBADF (Bad file descriptor) [pid 5156] close(11) = -1 EBADF (Bad file descriptor) [pid 5156] close(12) = -1 EBADF (Bad file descriptor) [pid 5156] close(13) = -1 EBADF (Bad file descriptor) [pid 5156] close(14) = -1 EBADF (Bad file descriptor) [pid 5156] close(15) = -1 EBADF (Bad file descriptor) [pid 5156] close(16) = -1 EBADF (Bad file descriptor) [pid 5156] close(17) = -1 EBADF (Bad file descriptor) [pid 5156] close(18) = -1 EBADF (Bad file descriptor) [pid 5156] close(19) = -1 EBADF (Bad file descriptor) [pid 5156] close(20) = -1 EBADF (Bad file descriptor) [pid 5156] close(21) = -1 EBADF (Bad file descriptor) [pid 5156] close(22) = -1 EBADF (Bad file descriptor) [pid 5156] close(23) = -1 EBADF (Bad file descriptor) [pid 5156] close(24) = -1 EBADF (Bad file descriptor) [pid 5156] close(25) = -1 EBADF (Bad file descriptor) [pid 5156] close(26) = -1 EBADF (Bad file descriptor) [pid 5156] close(27) = -1 EBADF (Bad file descriptor) [pid 5156] close(28) = -1 EBADF (Bad file descriptor) [pid 5156] close(29) = -1 EBADF (Bad file descriptor) [pid 5156] exit_group(0 [pid 5174] <... futex resumed>) = ? [pid 5157] <... futex resumed>) = ? [pid 5156] <... exit_group resumed>) = ? [pid 5174] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ [pid 5156] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./7/cgroup.cpu") = 0 [pid 5007] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./7/binderfs") = 0 [pid 5007] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./7/file0") = 0 [pid 5007] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./7/cgroup") = 0 [pid 5007] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./7/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./7") = 0 [pid 5007] mkdir("./8", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 26 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x5555571235e0, 24) = 0 [pid 5178] chdir("./8") = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5178] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5178] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5178] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5179 attached , parent_tid=[27], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 27 [pid 5179] set_robust_list(0x7fd090fc79e0, 24 [pid 5178] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5179] <... set_robust_list resumed>) = 0 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5179] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [ 87.314619][ T5179] loop0: detected capacity change from 0 to 32768 [ 87.327030][ T5179] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5179) [pid 5179] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [pid 5179] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5178] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... openat resumed>) = 4 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5179] <... futex resumed>) = 1 [pid 5178] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5178] <... futex resumed>) = 0 [ 87.364762][ T5179] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 87.373666][ T5179] BTRFS info (device loop0): using free space tree [ 87.394467][ T5179] BTRFS info (device loop0): enabling ssd optimizations [ 87.401729][ T5179] BTRFS info (device loop0): auto enabling async discard [pid 5178] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5178] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[28], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 28 [pid 5178] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.450290][ T5179] BTRFS info (device loop0): balance: start -s [ 87.458727][ T5179] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5178] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5196 attached [pid 5196] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5196] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5196] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 87.494562][ T5179] BTRFS info (device loop0): balance: ended with status: 0 [pid 5179] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5179] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5179] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] <... ioctl resumed>) = 0 [pid 5196] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] close(3 [pid 5196] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... close resumed>) = 0 [pid 5178] close(4) = 0 [pid 5178] close(5) = 0 [pid 5178] close(6) = -1 EBADF (Bad file descriptor) [pid 5178] close(7) = -1 EBADF (Bad file descriptor) [pid 5178] close(8) = -1 EBADF (Bad file descriptor) [pid 5178] close(9) = -1 EBADF (Bad file descriptor) [pid 5178] close(10) = -1 EBADF (Bad file descriptor) [pid 5178] close(11) = -1 EBADF (Bad file descriptor) [pid 5178] close(12) = -1 EBADF (Bad file descriptor) [pid 5178] close(13) = -1 EBADF (Bad file descriptor) [pid 5178] close(14) = -1 EBADF (Bad file descriptor) [pid 5178] close(15) = -1 EBADF (Bad file descriptor) [pid 5178] close(16) = -1 EBADF (Bad file descriptor) [pid 5178] close(17) = -1 EBADF (Bad file descriptor) [pid 5178] close(18) = -1 EBADF (Bad file descriptor) [pid 5178] close(19) = -1 EBADF (Bad file descriptor) [pid 5178] close(20) = -1 EBADF (Bad file descriptor) [pid 5178] close(21) = -1 EBADF (Bad file descriptor) [pid 5178] close(22) = -1 EBADF (Bad file descriptor) [pid 5178] close(23) = -1 EBADF (Bad file descriptor) [pid 5178] close(24) = -1 EBADF (Bad file descriptor) [pid 5178] close(25) = -1 EBADF (Bad file descriptor) [pid 5178] close(26) = -1 EBADF (Bad file descriptor) [pid 5178] close(27) = -1 EBADF (Bad file descriptor) [pid 5178] close(28) = -1 EBADF (Bad file descriptor) [pid 5178] close(29) = -1 EBADF (Bad file descriptor) [pid 5178] exit_group(0 [pid 5196] <... futex resumed>) = ? [pid 5179] <... futex resumed>) = ? [pid 5178] <... exit_group resumed>) = ? [pid 5196] +++ exited with 0 +++ [pid 5179] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./8/cgroup.cpu") = 0 [pid 5007] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./8/binderfs") = 0 [pid 5007] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./8/file0") = 0 [pid 5007] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./8/cgroup") = 0 [pid 5007] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./8/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./8") = 0 [pid 5007] mkdir("./9", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 29 ./strace-static-x86_64: Process 5197 attached [pid 5197] set_robust_list(0x5555571235e0, 24) = 0 [pid 5197] chdir("./9") = 0 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5197] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5197] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5197] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5198] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] <... clone resumed>, parent_tid=[30], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 30 [pid 5197] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 1 [pid 5198] memfd_create("syzkaller", 0 [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5198] <... memfd_create resumed>) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5198] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5198] close(3) = 0 [pid 5198] mkdir("./file0", 0777) = 0 [ 88.028507][ T5198] loop0: detected capacity change from 0 to 32768 [ 88.038860][ T5198] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5198) [ 88.056751][ T5198] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.065666][ T5198] BTRFS info (device loop0): using free space tree [pid 5198] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] chdir("./file0") = 0 [pid 5198] ioctl(4, LOOP_CLR_FD) = 0 [pid 5198] close(4) = 0 [pid 5198] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5198] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5197] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] <... openat resumed>) = 4 [pid 5198] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... futex resumed>) = 0 [pid 5197] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5198] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 88.086498][ T5198] BTRFS info (device loop0): enabling ssd optimizations [ 88.093546][ T5198] BTRFS info (device loop0): auto enabling async discard [pid 5197] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5197] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5197] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[31], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 31 [pid 5197] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5215 attached [pid 5215] set_robust_list(0x7fd089ba69e0, 24) = 0 [ 88.146634][ T5198] BTRFS info (device loop0): balance: start -s [ 88.155296][ T5198] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5215] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5215] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5197] <... futex resumed>) = 0 [pid 5197] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5197] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5198] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5198] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.187222][ T5198] BTRFS info (device loop0): balance: ended with status: 0 [pid 5198] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5215] <... ioctl resumed>) = 0 [pid 5215] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] close(3 [pid 5215] <... futex resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5215] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] close(4) = 0 [pid 5197] close(5) = 0 [pid 5197] close(6) = -1 EBADF (Bad file descriptor) [pid 5197] close(7) = -1 EBADF (Bad file descriptor) [pid 5197] close(8) = -1 EBADF (Bad file descriptor) [pid 5197] close(9) = -1 EBADF (Bad file descriptor) [pid 5197] close(10) = -1 EBADF (Bad file descriptor) [pid 5197] close(11) = -1 EBADF (Bad file descriptor) [pid 5197] close(12) = -1 EBADF (Bad file descriptor) [pid 5197] close(13) = -1 EBADF (Bad file descriptor) [pid 5197] close(14) = -1 EBADF (Bad file descriptor) [pid 5197] close(15) = -1 EBADF (Bad file descriptor) [pid 5197] close(16) = -1 EBADF (Bad file descriptor) [pid 5197] close(17) = -1 EBADF (Bad file descriptor) [pid 5197] close(18) = -1 EBADF (Bad file descriptor) [pid 5197] close(19) = -1 EBADF (Bad file descriptor) [pid 5197] close(20) = -1 EBADF (Bad file descriptor) [pid 5197] close(21) = -1 EBADF (Bad file descriptor) [pid 5197] close(22) = -1 EBADF (Bad file descriptor) [pid 5197] close(23) = -1 EBADF (Bad file descriptor) [pid 5197] close(24) = -1 EBADF (Bad file descriptor) [pid 5197] close(25) = -1 EBADF (Bad file descriptor) [pid 5197] close(26) = -1 EBADF (Bad file descriptor) [pid 5197] close(27) = -1 EBADF (Bad file descriptor) [pid 5197] close(28) = -1 EBADF (Bad file descriptor) [pid 5197] close(29) = -1 EBADF (Bad file descriptor) [pid 5197] exit_group(0 [pid 5215] <... futex resumed>) = ? [pid 5198] <... futex resumed>) = ? [pid 5197] <... exit_group resumed>) = ? [pid 5215] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5197] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./9/cgroup.cpu") = 0 [pid 5007] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./9/binderfs") = 0 [pid 5007] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./9/file0") = 0 [pid 5007] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./9/cgroup") = 0 [pid 5007] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./9/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./9") = 0 [pid 5007] mkdir("./10", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 32 ./strace-static-x86_64: Process 5216 attached [pid 5216] set_robust_list(0x5555571235e0, 24) = 0 [pid 5216] chdir("./10") = 0 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5216] setpgid(0, 0) = 0 [pid 5216] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5216] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5216] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5216] write(3, "1000", 4) = 4 [pid 5216] close(3) = 0 [pid 5216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5216] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5217 attached , parent_tid=[33], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 33 [pid 5216] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] set_robust_list(0x7fd090fc79e0, 24 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5217] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] close(3) = 0 [pid 5217] mkdir("./file0", 0777) = 0 [ 88.717086][ T5217] loop0: detected capacity change from 0 to 32768 [ 88.728832][ T5217] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5217) [ 88.746120][ T5217] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 88.754898][ T5217] BTRFS info (device loop0): using free space tree [pid 5217] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5217] chdir("./file0") = 0 [pid 5217] ioctl(4, LOOP_CLR_FD) = 0 [pid 5217] close(4) = 0 [pid 5217] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5217] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 88.776844][ T5217] BTRFS info (device loop0): enabling ssd optimizations [ 88.783947][ T5217] BTRFS info (device loop0): auto enabling async discard [ 88.821299][ T5217] BTRFS info (device loop0): balance: start -s [ 88.830667][ T5217] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5217] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5216] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5216] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[34], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 34 [pid 5216] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5234 attached [pid 5234] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5234] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5234] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5234] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5216] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5217] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.862451][ T5217] BTRFS info (device loop0): balance: ended with status: 0 [pid 5217] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5234] <... ioctl resumed>) = 0 [pid 5234] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5234] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] close(3) = 0 [pid 5216] close(4) = 0 [pid 5216] close(5) = 0 [pid 5216] close(6) = -1 EBADF (Bad file descriptor) [pid 5216] close(7) = -1 EBADF (Bad file descriptor) [pid 5216] close(8) = -1 EBADF (Bad file descriptor) [pid 5216] close(9) = -1 EBADF (Bad file descriptor) [pid 5216] close(10) = -1 EBADF (Bad file descriptor) [pid 5216] close(11) = -1 EBADF (Bad file descriptor) [pid 5216] close(12) = -1 EBADF (Bad file descriptor) [pid 5216] close(13) = -1 EBADF (Bad file descriptor) [pid 5216] close(14) = -1 EBADF (Bad file descriptor) [pid 5216] close(15) = -1 EBADF (Bad file descriptor) [pid 5216] close(16) = -1 EBADF (Bad file descriptor) [pid 5216] close(17) = -1 EBADF (Bad file descriptor) [pid 5216] close(18) = -1 EBADF (Bad file descriptor) [pid 5216] close(19) = -1 EBADF (Bad file descriptor) [pid 5216] close(20) = -1 EBADF (Bad file descriptor) [pid 5216] close(21) = -1 EBADF (Bad file descriptor) [pid 5216] close(22) = -1 EBADF (Bad file descriptor) [pid 5216] close(23) = -1 EBADF (Bad file descriptor) [pid 5216] close(24) = -1 EBADF (Bad file descriptor) [pid 5216] close(25) = -1 EBADF (Bad file descriptor) [pid 5216] close(26) = -1 EBADF (Bad file descriptor) [pid 5216] close(27) = -1 EBADF (Bad file descriptor) [pid 5216] close(28) = -1 EBADF (Bad file descriptor) [pid 5216] close(29) = -1 EBADF (Bad file descriptor) [pid 5216] exit_group(0 [pid 5217] <... futex resumed>) = ? [pid 5234] <... futex resumed>) = ? [pid 5216] <... exit_group resumed>) = ? [pid 5217] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 5216] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./10/cgroup.cpu") = 0 [pid 5007] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./10/binderfs") = 0 [pid 5007] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./10/file0") = 0 [pid 5007] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./10/cgroup") = 0 [pid 5007] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./10/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./10") = 0 [pid 5007] mkdir("./11", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 35 ./strace-static-x86_64: Process 5235 attached [pid 5235] set_robust_list(0x5555571235e0, 24) = 0 [pid 5235] chdir("./11") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5235] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5235] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5235] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5236] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... clone resumed>, parent_tid=[36], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 36 [pid 5235] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5236] memfd_create("syzkaller", 0 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5236] <... memfd_create resumed>) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5236] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [ 89.404699][ T5236] loop0: detected capacity change from 0 to 32768 [ 89.415967][ T5236] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5236) [ 89.433898][ T5236] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.442844][ T5236] BTRFS info (device loop0): using free space tree [pid 5236] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file0") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5235] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... openat resumed>) = 4 [pid 5236] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = 0 [ 89.463395][ T5236] BTRFS info (device loop0): enabling ssd optimizations [ 89.470613][ T5236] BTRFS info (device loop0): auto enabling async discard [pid 5236] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5235] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5253 attached [pid 5253] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5253] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... clone resumed>, parent_tid=[37], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 37 [pid 5235] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 89.519867][ T5236] BTRFS info (device loop0): balance: start -s [ 89.529357][ T5236] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5253] <... futex resumed>) = 0 [pid 5235] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5253] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5235] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5253] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 89.573296][ T5236] BTRFS info (device loop0): balance: ended with status: 0 [pid 5235] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5236] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5236] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... ioctl resumed>) = 0 [pid 5253] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] close(3) = 0 [pid 5235] close(4) = 0 [pid 5235] close(5) = 0 [pid 5235] close(6) = -1 EBADF (Bad file descriptor) [pid 5235] close(7) = -1 EBADF (Bad file descriptor) [pid 5235] close(8) = -1 EBADF (Bad file descriptor) [pid 5235] close(9) = -1 EBADF (Bad file descriptor) [pid 5235] close(10) = -1 EBADF (Bad file descriptor) [pid 5235] close(11) = -1 EBADF (Bad file descriptor) [pid 5235] close(12) = -1 EBADF (Bad file descriptor) [pid 5235] close(13) = -1 EBADF (Bad file descriptor) [pid 5235] close(14) = -1 EBADF (Bad file descriptor) [pid 5235] close(15) = -1 EBADF (Bad file descriptor) [pid 5235] close(16) = -1 EBADF (Bad file descriptor) [pid 5235] close(17) = -1 EBADF (Bad file descriptor) [pid 5235] close(18) = -1 EBADF (Bad file descriptor) [pid 5235] close(19) = -1 EBADF (Bad file descriptor) [pid 5235] close(20) = -1 EBADF (Bad file descriptor) [pid 5235] close(21) = -1 EBADF (Bad file descriptor) [pid 5235] close(22) = -1 EBADF (Bad file descriptor) [pid 5235] close(23) = -1 EBADF (Bad file descriptor) [pid 5235] close(24) = -1 EBADF (Bad file descriptor) [pid 5235] close(25) = -1 EBADF (Bad file descriptor) [pid 5235] close(26) = -1 EBADF (Bad file descriptor) [pid 5235] close(27) = -1 EBADF (Bad file descriptor) [pid 5235] close(28) = -1 EBADF (Bad file descriptor) [pid 5235] close(29) = -1 EBADF (Bad file descriptor) [pid 5235] exit_group(0 [pid 5253] <... futex resumed>) = ? [pid 5236] <... futex resumed>) = ? [pid 5235] <... exit_group resumed>) = ? [pid 5253] +++ exited with 0 +++ [pid 5236] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./11/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./11/cgroup.cpu") = 0 [pid 5007] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./11/binderfs") = 0 [pid 5007] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./11/file0") = 0 [pid 5007] umount2("./11/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./11/cgroup") = 0 [pid 5007] umount2("./11/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./11/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./11") = 0 [pid 5007] mkdir("./12", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 38 ./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x5555571235e0, 24) = 0 [pid 5254] chdir("./12") = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5254] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5254] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5254] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5255 attached [pid 5255] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5255] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... clone resumed>, parent_tid=[39], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 39 [pid 5254] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5255] memfd_create("syzkaller", 0) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5255] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5255] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5255] close(3) = 0 [pid 5255] mkdir("./file0", 0777) = 0 [ 90.108802][ T5255] loop0: detected capacity change from 0 to 32768 [ 90.120327][ T5255] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5255) [ 90.139737][ T5255] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.148626][ T5255] BTRFS info (device loop0): using free space tree [pid 5255] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5255] chdir("./file0") = 0 [pid 5255] ioctl(4, LOOP_CLR_FD) = 0 [pid 5255] close(4) = 0 [pid 5255] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5255] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... openat resumed>) = 4 [pid 5255] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5255] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5254] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.169383][ T5255] BTRFS info (device loop0): enabling ssd optimizations [ 90.176520][ T5255] BTRFS info (device loop0): auto enabling async discard [pid 5254] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5254] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5254] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[40], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 40 [pid 5254] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5272 attached [pid 5272] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5272] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5272] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5272] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5254] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.234378][ T5255] BTRFS info (device loop0): balance: start -s [ 90.244639][ T5255] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5254] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5255] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 90.307483][ T5255] BTRFS info (device loop0): balance: ended with status: 0 [pid 5272] <... ioctl resumed>) = 0 [pid 5272] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] close(3 [pid 5272] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] <... close resumed>) = 0 [pid 5254] close(4) = 0 [pid 5254] close(5) = 0 [pid 5254] close(6) = -1 EBADF (Bad file descriptor) [pid 5254] close(7) = -1 EBADF (Bad file descriptor) [pid 5254] close(8) = -1 EBADF (Bad file descriptor) [pid 5254] close(9) = -1 EBADF (Bad file descriptor) [pid 5254] close(10) = -1 EBADF (Bad file descriptor) [pid 5254] close(11) = -1 EBADF (Bad file descriptor) [pid 5254] close(12) = -1 EBADF (Bad file descriptor) [pid 5254] close(13) = -1 EBADF (Bad file descriptor) [pid 5254] close(14) = -1 EBADF (Bad file descriptor) [pid 5254] close(15) = -1 EBADF (Bad file descriptor) [pid 5254] close(16) = -1 EBADF (Bad file descriptor) [pid 5254] close(17) = -1 EBADF (Bad file descriptor) [pid 5254] close(18) = -1 EBADF (Bad file descriptor) [pid 5254] close(19) = -1 EBADF (Bad file descriptor) [pid 5254] close(20) = -1 EBADF (Bad file descriptor) [pid 5254] close(21) = -1 EBADF (Bad file descriptor) [pid 5254] close(22) = -1 EBADF (Bad file descriptor) [pid 5254] close(23) = -1 EBADF (Bad file descriptor) [pid 5254] close(24) = -1 EBADF (Bad file descriptor) [pid 5254] close(25) = -1 EBADF (Bad file descriptor) [pid 5254] close(26) = -1 EBADF (Bad file descriptor) [pid 5254] close(27) = -1 EBADF (Bad file descriptor) [pid 5254] close(28) = -1 EBADF (Bad file descriptor) [pid 5254] close(29) = -1 EBADF (Bad file descriptor) [pid 5254] exit_group(0 [pid 5255] <... futex resumed>) = ? [pid 5254] <... exit_group resumed>) = ? [pid 5272] <... futex resumed>) = ? [pid 5255] +++ exited with 0 +++ [pid 5272] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./12/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./12/cgroup.cpu") = 0 [pid 5007] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./12/binderfs") = 0 [pid 5007] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./12/file0") = 0 [pid 5007] umount2("./12/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./12/cgroup") = 0 [pid 5007] umount2("./12/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./12/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./12") = 0 [pid 5007] mkdir("./13", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5273 attached , child_tidptr=0x5555571235d0) = 41 [pid 5273] set_robust_list(0x5555571235e0, 24) = 0 [pid 5273] chdir("./13") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5273] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5273] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5273] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5274] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] <... clone resumed>, parent_tid=[42], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 42 [pid 5273] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = 1 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5274] <... mmap resumed>) = 0x7fd088ba7000 [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5274] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5274] close(3) = 0 [pid 5274] mkdir("./file0", 0777) = 0 [ 90.836741][ T5274] loop0: detected capacity change from 0 to 32768 [ 90.849183][ T5274] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5274) [ 90.868134][ T5274] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.877032][ T5274] BTRFS info (device loop0): using free space tree [pid 5274] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./file0") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD) = 0 [pid 5274] close(4) = 0 [pid 5274] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 1 [pid 5274] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5274] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 1 [ 90.895006][ T5274] BTRFS info (device loop0): enabling ssd optimizations [ 90.902172][ T5274] BTRFS info (device loop0): auto enabling async discard [ 90.934737][ T5274] BTRFS info (device loop0): balance: start -s [pid 5274] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5273] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5273] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5290 attached [pid 5290] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5290] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] <... clone resumed>, parent_tid=[43], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 43 [pid 5273] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... futex resumed>) = 0 [pid 5290] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5290] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5290] <... futex resumed>) = 1 [pid 5290] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5273] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.947316][ T5274] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5273] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 91.051827][ T5274] BTRFS info (device loop0): balance: ended with status: 0 [pid 5290] <... ioctl resumed>) = 0 [pid 5290] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5274] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... futex resumed>) = 0 [pid 5274] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] close(3) = 0 [pid 5273] close(4) = 0 [pid 5273] close(5) = 0 [pid 5273] close(6) = -1 EBADF (Bad file descriptor) [pid 5273] close(7) = -1 EBADF (Bad file descriptor) [pid 5273] close(8) = -1 EBADF (Bad file descriptor) [pid 5273] close(9) = -1 EBADF (Bad file descriptor) [pid 5273] close(10) = -1 EBADF (Bad file descriptor) [pid 5273] close(11) = -1 EBADF (Bad file descriptor) [pid 5273] close(12) = -1 EBADF (Bad file descriptor) [pid 5273] close(13) = -1 EBADF (Bad file descriptor) [pid 5273] close(14) = -1 EBADF (Bad file descriptor) [pid 5273] close(15) = -1 EBADF (Bad file descriptor) [pid 5273] close(16) = -1 EBADF (Bad file descriptor) [pid 5273] close(17) = -1 EBADF (Bad file descriptor) [pid 5273] close(18) = -1 EBADF (Bad file descriptor) [pid 5273] close(19) = -1 EBADF (Bad file descriptor) [pid 5273] close(20) = -1 EBADF (Bad file descriptor) [pid 5273] close(21) = -1 EBADF (Bad file descriptor) [pid 5273] close(22) = -1 EBADF (Bad file descriptor) [pid 5273] close(23) = -1 EBADF (Bad file descriptor) [pid 5273] close(24) = -1 EBADF (Bad file descriptor) [pid 5273] close(25) = -1 EBADF (Bad file descriptor) [pid 5273] close(26) = -1 EBADF (Bad file descriptor) [pid 5273] close(27) = -1 EBADF (Bad file descriptor) [pid 5273] close(28) = -1 EBADF (Bad file descriptor) [pid 5273] close(29) = -1 EBADF (Bad file descriptor) [pid 5273] exit_group(0) = ? [pid 5290] <... futex resumed>) = ? [pid 5274] <... futex resumed>) = ? [pid 5290] +++ exited with 0 +++ [pid 5274] +++ exited with 0 +++ [pid 5273] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./13/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./13/cgroup.cpu") = 0 [pid 5007] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./13/binderfs") = 0 [pid 5007] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./13/file0") = 0 [pid 5007] umount2("./13/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./13/cgroup") = 0 [pid 5007] umount2("./13/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./13/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./13") = 0 [pid 5007] mkdir("./14", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 44 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x5555571235e0, 24) = 0 [pid 5292] chdir("./14") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5292] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5292] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5292] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5293 attached [pid 5293] set_robust_list(0x7fd090fc79e0, 24 [pid 5292] <... clone resumed>, parent_tid=[45], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 45 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5292] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] memfd_create("syzkaller", 0 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5293] <... memfd_create resumed>) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5293] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5293] close(3) = 0 [pid 5293] mkdir("./file0", 0777) = 0 [ 91.608190][ T5293] loop0: detected capacity change from 0 to 32768 [ 91.619715][ T5293] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5293) [ 91.636880][ T5293] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 91.645763][ T5293] BTRFS info (device loop0): using free space tree [pid 5293] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./file0") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5293] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... futex resumed>) = 0 [pid 5293] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5293] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... futex resumed>) = 1 [ 91.666647][ T5293] BTRFS info (device loop0): enabling ssd optimizations [ 91.673703][ T5293] BTRFS info (device loop0): auto enabling async discard [pid 5293] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5292] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5292] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5310 attached [pid 5310] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5310] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... clone resumed>, parent_tid=[46], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 46 [pid 5292] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] <... futex resumed>) = 0 [pid 5310] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5310] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] <... futex resumed>) = 1 [ 91.724197][ T5293] BTRFS info (device loop0): balance: start -s [ 91.733872][ T5293] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5310] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 91.833170][ T5293] BTRFS info (device loop0): balance: ended with status: 0 [ 91.858593][ T1449] cfg80211: failed to load regulatory.db [pid 5310] <... ioctl resumed>) = 0 [pid 5310] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5310] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] close(3) = 0 [pid 5292] close(4) = 0 [pid 5292] close(5) = 0 [pid 5292] close(6) = -1 EBADF (Bad file descriptor) [pid 5292] close(7) = -1 EBADF (Bad file descriptor) [pid 5292] close(8) = -1 EBADF (Bad file descriptor) [pid 5292] close(9) = -1 EBADF (Bad file descriptor) [pid 5292] close(10) = -1 EBADF (Bad file descriptor) [pid 5292] close(11) = -1 EBADF (Bad file descriptor) [pid 5292] close(12) = -1 EBADF (Bad file descriptor) [pid 5292] close(13) = -1 EBADF (Bad file descriptor) [pid 5292] close(14) = -1 EBADF (Bad file descriptor) [pid 5292] close(15) = -1 EBADF (Bad file descriptor) [pid 5292] close(16) = -1 EBADF (Bad file descriptor) [pid 5292] close(17) = -1 EBADF (Bad file descriptor) [pid 5292] close(18) = -1 EBADF (Bad file descriptor) [pid 5292] close(19) = -1 EBADF (Bad file descriptor) [pid 5292] close(20) = -1 EBADF (Bad file descriptor) [pid 5292] close(21) = -1 EBADF (Bad file descriptor) [pid 5292] close(22) = -1 EBADF (Bad file descriptor) [pid 5292] close(23) = -1 EBADF (Bad file descriptor) [pid 5292] close(24) = -1 EBADF (Bad file descriptor) [pid 5292] close(25) = -1 EBADF (Bad file descriptor) [pid 5292] close(26) = -1 EBADF (Bad file descriptor) [pid 5292] close(27) = -1 EBADF (Bad file descriptor) [pid 5292] close(28) = -1 EBADF (Bad file descriptor) [pid 5292] close(29) = -1 EBADF (Bad file descriptor) [pid 5292] exit_group(0 [pid 5310] <... futex resumed>) = ? [pid 5293] <... futex resumed>) = ? [pid 5292] <... exit_group resumed>) = ? [pid 5310] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./14/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./14/cgroup.cpu") = 0 [pid 5007] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./14/binderfs") = 0 [pid 5007] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./14/file0") = 0 [pid 5007] umount2("./14/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./14/cgroup") = 0 [pid 5007] umount2("./14/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./14/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./14") = 0 [pid 5007] mkdir("./15", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5311 attached [pid 5311] set_robust_list(0x5555571235e0, 24) = 0 [pid 5311] chdir("./15") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5311] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5311] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5311] write(3, "1000", 4) = 4 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 47 [pid 5311] <... mmap resumed>) = 0x7fd090fa7000 [pid 5311] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5312 attached [pid 5312] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5312] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... clone resumed>, parent_tid=[48], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 48 [pid 5311] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = 0 [pid 5311] <... futex resumed>) = 1 [pid 5312] memfd_create("syzkaller", 0 [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5312] <... memfd_create resumed>) = 3 [pid 5312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5312] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5312] close(3) = 0 [pid 5312] mkdir("./file0", 0777) = 0 [ 92.343021][ T5312] loop0: detected capacity change from 0 to 32768 [ 92.354234][ T5312] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5312) [ 92.371515][ T5312] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 92.380558][ T5312] BTRFS info (device loop0): using free space tree [pid 5312] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5312] chdir("./file0") = 0 [pid 5312] ioctl(4, LOOP_CLR_FD) = 0 [pid 5312] close(4) = 0 [pid 5312] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5312] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = 0 [pid 5311] <... futex resumed>) = 1 [pid 5312] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... openat resumed>) = 4 [pid 5312] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5312] <... futex resumed>) = 1 [pid 5312] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5311] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.400580][ T5312] BTRFS info (device loop0): enabling ssd optimizations [ 92.407759][ T5312] BTRFS info (device loop0): auto enabling async discard [pid 5311] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5311] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5311] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5329 attached , parent_tid=[49], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 49 [pid 5329] set_robust_list(0x7fd089ba69e0, 24 [pid 5311] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... set_robust_list resumed>) = 0 [pid 5311] <... futex resumed>) = 0 [ 92.464378][ T5312] BTRFS info (device loop0): balance: start -s [ 92.473644][ T5312] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5311] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5329] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5312] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.516827][ T5312] BTRFS info (device loop0): balance: ended with status: 0 [pid 5312] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5329] <... ioctl resumed>) = 0 [pid 5329] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] close(3) = 0 [pid 5311] close(4) = 0 [pid 5311] close(5) = 0 [pid 5311] close(6) = -1 EBADF (Bad file descriptor) [pid 5311] close(7) = -1 EBADF (Bad file descriptor) [pid 5311] close(8) = -1 EBADF (Bad file descriptor) [pid 5311] close(9) = -1 EBADF (Bad file descriptor) [pid 5311] close(10) = -1 EBADF (Bad file descriptor) [pid 5311] close(11) = -1 EBADF (Bad file descriptor) [pid 5311] close(12) = -1 EBADF (Bad file descriptor) [pid 5311] close(13) = -1 EBADF (Bad file descriptor) [pid 5311] close(14) = -1 EBADF (Bad file descriptor) [pid 5311] close(15) = -1 EBADF (Bad file descriptor) [pid 5311] close(16) = -1 EBADF (Bad file descriptor) [pid 5311] close(17) = -1 EBADF (Bad file descriptor) [pid 5311] close(18) = -1 EBADF (Bad file descriptor) [pid 5311] close(19) = -1 EBADF (Bad file descriptor) [pid 5311] close(20) = -1 EBADF (Bad file descriptor) [pid 5311] close(21) = -1 EBADF (Bad file descriptor) [pid 5311] close(22) = -1 EBADF (Bad file descriptor) [pid 5311] close(23) = -1 EBADF (Bad file descriptor) [pid 5311] close(24) = -1 EBADF (Bad file descriptor) [pid 5311] close(25) = -1 EBADF (Bad file descriptor) [pid 5311] close(26) = -1 EBADF (Bad file descriptor) [pid 5311] close(27) = -1 EBADF (Bad file descriptor) [pid 5311] close(28) = -1 EBADF (Bad file descriptor) [pid 5311] close(29) = -1 EBADF (Bad file descriptor) [pid 5311] exit_group(0 [pid 5329] <... futex resumed>) = ? [pid 5312] <... futex resumed>) = ? [pid 5311] <... exit_group resumed>) = ? [pid 5329] +++ exited with 0 +++ [pid 5312] +++ exited with 0 +++ [pid 5311] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./15/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./15/cgroup.cpu") = 0 [pid 5007] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./15/binderfs") = 0 [pid 5007] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./15/file0") = 0 [pid 5007] umount2("./15/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./15/cgroup") = 0 [pid 5007] umount2("./15/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./15/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./15") = 0 [pid 5007] mkdir("./16", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5330 attached [pid 5330] set_robust_list(0x5555571235e0, 24) = 0 [pid 5330] chdir("./16") = 0 [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5330] setpgid(0, 0) = 0 [pid 5330] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5330] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5330] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5330] write(3, "1000", 4 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 50 [pid 5330] <... write resumed>) = 4 [pid 5330] close(3) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5330] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5331 attached [pid 5331] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5331] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... clone resumed>, parent_tid=[51], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 51 [pid 5330] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5331] memfd_create("syzkaller", 0 [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5331] <... memfd_create resumed>) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5331] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5331] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5331] close(3) = 0 [pid 5331] mkdir("./file0", 0777) = 0 [ 93.049989][ T5331] loop0: detected capacity change from 0 to 32768 [ 93.061038][ T5331] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5331) [ 93.078700][ T5331] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.087577][ T5331] BTRFS info (device loop0): using free space tree [pid 5331] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./file0") = 0 [pid 5331] ioctl(4, LOOP_CLR_FD) = 0 [pid 5331] close(4) = 0 [pid 5331] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5331] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] <... futex resumed>) = 0 [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5331] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5331] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5330] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.109040][ T5331] BTRFS info (device loop0): enabling ssd optimizations [ 93.116211][ T5331] BTRFS info (device loop0): auto enabling async discard [ 93.153767][ T5331] BTRFS info (device loop0): balance: start -s [ 93.163050][ T5331] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5330] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5330] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5330] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5348 attached [pid 5348] set_robust_list(0x7fd089ba69e0, 24 [pid 5330] <... clone resumed>, parent_tid=[52], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 52 [pid 5348] <... set_robust_list resumed>) = 0 [pid 5330] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] openat(AT_FDCWD, ".", O_RDONLY [pid 5330] <... futex resumed>) = 0 [pid 5348] <... openat resumed>) = 5 [pid 5330] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5348] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5348] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5330] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5331] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.200464][ T5331] BTRFS info (device loop0): balance: ended with status: 0 [pid 5331] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5348] <... ioctl resumed>) = 0 [pid 5348] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5348] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] close(3) = 0 [pid 5330] close(4) = 0 [pid 5330] close(5) = 0 [pid 5330] close(6) = -1 EBADF (Bad file descriptor) [pid 5330] close(7) = -1 EBADF (Bad file descriptor) [pid 5330] close(8) = -1 EBADF (Bad file descriptor) [pid 5330] close(9) = -1 EBADF (Bad file descriptor) [pid 5330] close(10) = -1 EBADF (Bad file descriptor) [pid 5330] close(11) = -1 EBADF (Bad file descriptor) [pid 5330] close(12) = -1 EBADF (Bad file descriptor) [pid 5330] close(13) = -1 EBADF (Bad file descriptor) [pid 5330] close(14) = -1 EBADF (Bad file descriptor) [pid 5330] close(15) = -1 EBADF (Bad file descriptor) [pid 5330] close(16) = -1 EBADF (Bad file descriptor) [pid 5330] close(17) = -1 EBADF (Bad file descriptor) [pid 5330] close(18) = -1 EBADF (Bad file descriptor) [pid 5330] close(19) = -1 EBADF (Bad file descriptor) [pid 5330] close(20) = -1 EBADF (Bad file descriptor) [pid 5330] close(21) = -1 EBADF (Bad file descriptor) [pid 5330] close(22) = -1 EBADF (Bad file descriptor) [pid 5330] close(23) = -1 EBADF (Bad file descriptor) [pid 5330] close(24) = -1 EBADF (Bad file descriptor) [pid 5330] close(25) = -1 EBADF (Bad file descriptor) [pid 5330] close(26) = -1 EBADF (Bad file descriptor) [pid 5330] close(27) = -1 EBADF (Bad file descriptor) [pid 5330] close(28) = -1 EBADF (Bad file descriptor) [pid 5330] close(29) = -1 EBADF (Bad file descriptor) [pid 5330] exit_group(0 [pid 5348] <... futex resumed>) = ? [pid 5331] <... futex resumed>) = ? [pid 5330] <... exit_group resumed>) = ? [pid 5348] +++ exited with 0 +++ [pid 5331] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./16/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./16/cgroup.cpu") = 0 [pid 5007] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./16/binderfs") = 0 [pid 5007] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./16/file0") = 0 [pid 5007] umount2("./16/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./16/cgroup") = 0 [pid 5007] umount2("./16/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./16/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./16") = 0 [pid 5007] mkdir("./17", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5349 attached [pid 5349] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 53 [pid 5349] <... set_robust_list resumed>) = 0 [pid 5349] chdir("./17") = 0 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5349] setpgid(0, 0) = 0 [pid 5349] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5349] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5349] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5349] write(3, "1000", 4) = 4 [pid 5349] close(3) = 0 [pid 5349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5349] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5349] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5350 attached , parent_tid=[54], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 54 [pid 5350] set_robust_list(0x7fd090fc79e0, 24 [pid 5349] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... set_robust_list resumed>) = 0 [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5350] memfd_create("syzkaller", 0) = 3 [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5350] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5350] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5350] close(3) = 0 [pid 5350] mkdir("./file0", 0777) = 0 [ 93.706359][ T5350] loop0: detected capacity change from 0 to 32768 [ 93.717950][ T5350] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5350) [ 93.734579][ T5350] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.743688][ T5350] BTRFS info (device loop0): using free space tree [pid 5350] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5350] chdir("./file0") = 0 [pid 5350] ioctl(4, LOOP_CLR_FD) = 0 [pid 5350] close(4) = 0 [pid 5350] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5350] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5349] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... openat resumed>) = 4 [pid 5350] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = 0 [pid 5350] <... futex resumed>) = 1 [pid 5350] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5349] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.763708][ T5350] BTRFS info (device loop0): enabling ssd optimizations [ 93.770898][ T5350] BTRFS info (device loop0): auto enabling async discard [pid 5349] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5349] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [ 93.822620][ T5350] BTRFS info (device loop0): balance: start -s [ 93.831915][ T5350] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5349] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5349] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5367 attached [pid 5367] set_robust_list(0x7fd089ba69e0, 24 [pid 5349] <... clone resumed>, parent_tid=[55], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 55 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5349] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] openat(AT_FDCWD, ".", O_RDONLY [pid 5349] <... futex resumed>) = 0 [pid 5367] <... openat resumed>) = 5 [pid 5349] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5367] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5349] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5349] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5350] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.875371][ T5350] BTRFS info (device loop0): balance: ended with status: 0 [pid 5350] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5367] <... ioctl resumed>) = 0 [pid 5367] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] close(3 [pid 5367] <... futex resumed>) = 0 [pid 5349] <... close resumed>) = 0 [pid 5349] close(4 [pid 5367] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... close resumed>) = 0 [pid 5349] close(5) = 0 [pid 5349] close(6) = -1 EBADF (Bad file descriptor) [pid 5349] close(7) = -1 EBADF (Bad file descriptor) [pid 5349] close(8) = -1 EBADF (Bad file descriptor) [pid 5349] close(9) = -1 EBADF (Bad file descriptor) [pid 5349] close(10) = -1 EBADF (Bad file descriptor) [pid 5349] close(11) = -1 EBADF (Bad file descriptor) [pid 5349] close(12) = -1 EBADF (Bad file descriptor) [pid 5349] close(13) = -1 EBADF (Bad file descriptor) [pid 5349] close(14) = -1 EBADF (Bad file descriptor) [pid 5349] close(15) = -1 EBADF (Bad file descriptor) [pid 5349] close(16) = -1 EBADF (Bad file descriptor) [pid 5349] close(17) = -1 EBADF (Bad file descriptor) [pid 5349] close(18) = -1 EBADF (Bad file descriptor) [pid 5349] close(19) = -1 EBADF (Bad file descriptor) [pid 5349] close(20) = -1 EBADF (Bad file descriptor) [pid 5349] close(21) = -1 EBADF (Bad file descriptor) [pid 5349] close(22) = -1 EBADF (Bad file descriptor) [pid 5349] close(23) = -1 EBADF (Bad file descriptor) [pid 5349] close(24) = -1 EBADF (Bad file descriptor) [pid 5349] close(25) = -1 EBADF (Bad file descriptor) [pid 5349] close(26) = -1 EBADF (Bad file descriptor) [pid 5349] close(27) = -1 EBADF (Bad file descriptor) [pid 5349] close(28) = -1 EBADF (Bad file descriptor) [pid 5349] close(29) = -1 EBADF (Bad file descriptor) [pid 5349] exit_group(0 [pid 5367] <... futex resumed>) = ? [pid 5350] <... futex resumed>) = ? [pid 5349] <... exit_group resumed>) = ? [pid 5367] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 5349] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./17/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./17/cgroup.cpu") = 0 [pid 5007] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./17/binderfs") = 0 [pid 5007] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./17/file0") = 0 [pid 5007] umount2("./17/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./17/cgroup") = 0 [pid 5007] umount2("./17/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./17/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./17") = 0 [pid 5007] mkdir("./18", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 56 ./strace-static-x86_64: Process 5368 attached [pid 5368] set_robust_list(0x5555571235e0, 24) = 0 [pid 5368] chdir("./18") = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5368] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5368] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5368] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[57], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 57 [pid 5368] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5369 attached [pid 5369] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5369] memfd_create("syzkaller", 0) = 3 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5369] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5369] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5369] close(3) = 0 [pid 5369] mkdir("./file0", 0777) = 0 [ 94.387059][ T5369] loop0: detected capacity change from 0 to 32768 [ 94.398886][ T5369] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5369) [ 94.417863][ T5369] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 94.426980][ T5369] BTRFS info (device loop0): using free space tree [pid 5369] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5369] chdir("./file0") = 0 [pid 5369] ioctl(4, LOOP_CLR_FD) = 0 [pid 5369] close(4) = 0 [pid 5369] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... futex resumed>) = 1 [pid 5369] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5369] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... futex resumed>) = 1 [ 94.448229][ T5369] BTRFS info (device loop0): enabling ssd optimizations [ 94.455294][ T5369] BTRFS info (device loop0): auto enabling async discard [pid 5369] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5368] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5368] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5386 attached [pid 5386] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5386] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... clone resumed>, parent_tid=[58], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 58 [pid 5368] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... futex resumed>) = 0 [pid 5386] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5386] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5386] <... futex resumed>) = 1 [ 94.498149][ T5369] BTRFS info (device loop0): balance: start -s [ 94.508995][ T5369] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5386] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 94.591816][ T5369] BTRFS info (device loop0): balance: ended with status: 0 [pid 5386] <... ioctl resumed>) = 0 [pid 5369] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5369] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5386] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] <... futex resumed>) = 0 [pid 5368] close(3) = 0 [pid 5368] close(4 [pid 5386] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... close resumed>) = 0 [pid 5368] close(5) = 0 [pid 5368] close(6) = -1 EBADF (Bad file descriptor) [pid 5368] close(7) = -1 EBADF (Bad file descriptor) [pid 5368] close(8) = -1 EBADF (Bad file descriptor) [pid 5368] close(9) = -1 EBADF (Bad file descriptor) [pid 5368] close(10) = -1 EBADF (Bad file descriptor) [pid 5368] close(11) = -1 EBADF (Bad file descriptor) [pid 5368] close(12) = -1 EBADF (Bad file descriptor) [pid 5368] close(13) = -1 EBADF (Bad file descriptor) [pid 5368] close(14) = -1 EBADF (Bad file descriptor) [pid 5368] close(15) = -1 EBADF (Bad file descriptor) [pid 5368] close(16) = -1 EBADF (Bad file descriptor) [pid 5368] close(17) = -1 EBADF (Bad file descriptor) [pid 5368] close(18) = -1 EBADF (Bad file descriptor) [pid 5368] close(19) = -1 EBADF (Bad file descriptor) [pid 5368] close(20) = -1 EBADF (Bad file descriptor) [pid 5368] close(21) = -1 EBADF (Bad file descriptor) [pid 5368] close(22) = -1 EBADF (Bad file descriptor) [pid 5368] close(23) = -1 EBADF (Bad file descriptor) [pid 5368] close(24) = -1 EBADF (Bad file descriptor) [pid 5368] close(25) = -1 EBADF (Bad file descriptor) [pid 5368] close(26) = -1 EBADF (Bad file descriptor) [pid 5368] close(27) = -1 EBADF (Bad file descriptor) [pid 5368] close(28) = -1 EBADF (Bad file descriptor) [pid 5368] close(29) = -1 EBADF (Bad file descriptor) [pid 5368] exit_group(0 [pid 5386] <... futex resumed>) = ? [pid 5369] <... futex resumed>) = ? [pid 5368] <... exit_group resumed>) = ? [pid 5386] +++ exited with 0 +++ [pid 5369] +++ exited with 0 +++ [pid 5368] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./18/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./18/cgroup.cpu") = 0 [pid 5007] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./18/binderfs") = 0 [pid 5007] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./18/file0") = 0 [pid 5007] umount2("./18/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./18/cgroup") = 0 [pid 5007] umount2("./18/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./18/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./18") = 0 [pid 5007] mkdir("./19", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 59 ./strace-static-x86_64: Process 5387 attached [pid 5387] set_robust_list(0x5555571235e0, 24) = 0 [pid 5387] chdir("./19") = 0 [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5387] setpgid(0, 0) = 0 [pid 5387] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5387] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5387] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5387] write(3, "1000", 4) = 4 [pid 5387] close(3) = 0 [pid 5387] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5387] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5387] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[60], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 60 [pid 5387] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5388] memfd_create("syzkaller", 0) = 3 [pid 5388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5388] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5388] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5388] close(3) = 0 [pid 5388] mkdir("./file0", 0777) = 0 [ 95.072261][ T5388] loop0: detected capacity change from 0 to 32768 [ 95.083829][ T5388] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5388) [ 95.101456][ T5388] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.110317][ T5388] BTRFS info (device loop0): using free space tree [pid 5388] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5388] chdir("./file0") = 0 [pid 5388] ioctl(4, LOOP_CLR_FD) = 0 [pid 5388] close(4) = 0 [pid 5388] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] <... futex resumed>) = 0 [pid 5387] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5387] <... futex resumed>) = 0 [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... openat resumed>) = 4 [pid 5388] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] <... futex resumed>) = 0 [pid 5388] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5387] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.132106][ T5388] BTRFS info (device loop0): enabling ssd optimizations [ 95.139627][ T5388] BTRFS info (device loop0): auto enabling async discard [pid 5387] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5387] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5387] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5387] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5405 attached , parent_tid=[61], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 61 [pid 5405] set_robust_list(0x7fd089ba69e0, 24 [pid 5387] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] <... set_robust_list resumed>) = 0 [pid 5387] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5405] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] <... futex resumed>) = 0 [pid 5405] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5387] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5388] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.182316][ T5388] BTRFS info (device loop0): balance: start -s [ 95.190580][ T5388] BTRFS info (device loop0): relocating block group 1048576 flags system [ 95.221598][ T5388] BTRFS info (device loop0): balance: ended with status: 0 [pid 5388] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5387] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5405] <... ioctl resumed>) = 0 [pid 5405] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] close(3 [pid 5405] <... futex resumed>) = 0 [pid 5387] <... close resumed>) = 0 [pid 5405] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5387] close(4) = 0 [pid 5387] close(5) = 0 [pid 5387] close(6) = -1 EBADF (Bad file descriptor) [pid 5387] close(7) = -1 EBADF (Bad file descriptor) [pid 5387] close(8) = -1 EBADF (Bad file descriptor) [pid 5387] close(9) = -1 EBADF (Bad file descriptor) [pid 5387] close(10) = -1 EBADF (Bad file descriptor) [pid 5387] close(11) = -1 EBADF (Bad file descriptor) [pid 5387] close(12) = -1 EBADF (Bad file descriptor) [pid 5387] close(13) = -1 EBADF (Bad file descriptor) [pid 5387] close(14) = -1 EBADF (Bad file descriptor) [pid 5387] close(15) = -1 EBADF (Bad file descriptor) [pid 5387] close(16) = -1 EBADF (Bad file descriptor) [pid 5387] close(17) = -1 EBADF (Bad file descriptor) [pid 5387] close(18) = -1 EBADF (Bad file descriptor) [pid 5387] close(19) = -1 EBADF (Bad file descriptor) [pid 5387] close(20) = -1 EBADF (Bad file descriptor) [pid 5387] close(21) = -1 EBADF (Bad file descriptor) [pid 5387] close(22) = -1 EBADF (Bad file descriptor) [pid 5387] close(23) = -1 EBADF (Bad file descriptor) [pid 5387] close(24) = -1 EBADF (Bad file descriptor) [pid 5387] close(25) = -1 EBADF (Bad file descriptor) [pid 5387] close(26) = -1 EBADF (Bad file descriptor) [pid 5387] close(27) = -1 EBADF (Bad file descriptor) [pid 5387] close(28) = -1 EBADF (Bad file descriptor) [pid 5387] close(29) = -1 EBADF (Bad file descriptor) [pid 5387] exit_group(0 [pid 5388] <... futex resumed>) = ? [pid 5387] <... exit_group resumed>) = ? [pid 5388] +++ exited with 0 +++ [pid 5405] <... futex resumed>) = ? [pid 5405] +++ exited with 0 +++ [pid 5387] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./19/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./19/cgroup.cpu") = 0 [pid 5007] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./19/binderfs") = 0 [pid 5007] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./19/file0") = 0 [pid 5007] umount2("./19/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./19/cgroup") = 0 [pid 5007] umount2("./19/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./19/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./19") = 0 [pid 5007] mkdir("./20", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5406 attached [pid 5406] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 62 [pid 5406] <... set_robust_list resumed>) = 0 [pid 5406] chdir("./20") = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5406] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5406] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5406] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5406] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5407 attached , parent_tid=[63], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 63 [pid 5407] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5407] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5407] <... futex resumed>) = 0 [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5407] memfd_create("syzkaller", 0) = 3 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5407] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5407] close(3) = 0 [pid 5407] mkdir("./file0", 0777) = 0 [ 95.767355][ T5407] loop0: detected capacity change from 0 to 32768 [ 95.777849][ T5407] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5407) [ 95.794363][ T5407] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.803674][ T5407] BTRFS info (device loop0): using free space tree [pid 5407] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5407] chdir("./file0") = 0 [pid 5407] ioctl(4, LOOP_CLR_FD) = 0 [pid 5407] close(4) = 0 [pid 5407] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5406] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5407] <... openat resumed>) = 4 [pid 5407] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5407] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5406] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.824842][ T5407] BTRFS info (device loop0): enabling ssd optimizations [ 95.832259][ T5407] BTRFS info (device loop0): auto enabling async discard [pid 5406] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5406] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5406] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5406] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5424 attached , parent_tid=[64], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 64 [pid 5424] set_robust_list(0x7fd089ba69e0, 24 [pid 5406] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5424] <... set_robust_list resumed>) = 0 [pid 5424] openat(AT_FDCWD, ".", O_RDONLY [pid 5406] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] <... openat resumed>) = 5 [pid 5424] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = 0 [pid 5424] <... futex resumed>) = 1 [ 95.873323][ T5407] BTRFS info (device loop0): balance: start -s [ 95.881579][ T5407] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5406] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 95.925021][ T5407] BTRFS info (device loop0): balance: ended with status: 0 [pid 5407] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5407] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5407] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] <... ioctl resumed>) = 0 [pid 5424] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5424] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] close(3) = 0 [pid 5406] close(4) = 0 [pid 5406] close(5) = 0 [pid 5406] close(6) = -1 EBADF (Bad file descriptor) [pid 5406] close(7) = -1 EBADF (Bad file descriptor) [pid 5406] close(8) = -1 EBADF (Bad file descriptor) [pid 5406] close(9) = -1 EBADF (Bad file descriptor) [pid 5406] close(10) = -1 EBADF (Bad file descriptor) [pid 5406] close(11) = -1 EBADF (Bad file descriptor) [pid 5406] close(12) = -1 EBADF (Bad file descriptor) [pid 5406] close(13) = -1 EBADF (Bad file descriptor) [pid 5406] close(14) = -1 EBADF (Bad file descriptor) [pid 5406] close(15) = -1 EBADF (Bad file descriptor) [pid 5406] close(16) = -1 EBADF (Bad file descriptor) [pid 5406] close(17) = -1 EBADF (Bad file descriptor) [pid 5406] close(18) = -1 EBADF (Bad file descriptor) [pid 5406] close(19) = -1 EBADF (Bad file descriptor) [pid 5406] close(20) = -1 EBADF (Bad file descriptor) [pid 5406] close(21) = -1 EBADF (Bad file descriptor) [pid 5406] close(22) = -1 EBADF (Bad file descriptor) [pid 5406] close(23) = -1 EBADF (Bad file descriptor) [pid 5406] close(24) = -1 EBADF (Bad file descriptor) [pid 5406] close(25) = -1 EBADF (Bad file descriptor) [pid 5406] close(26) = -1 EBADF (Bad file descriptor) [pid 5406] close(27) = -1 EBADF (Bad file descriptor) [pid 5406] close(28) = -1 EBADF (Bad file descriptor) [pid 5406] close(29) = -1 EBADF (Bad file descriptor) [pid 5406] exit_group(0 [pid 5424] <... futex resumed>) = ? [pid 5407] <... futex resumed>) = ? [pid 5406] <... exit_group resumed>) = ? [pid 5424] +++ exited with 0 +++ [pid 5407] +++ exited with 0 +++ [pid 5406] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./20/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./20/cgroup.cpu") = 0 [pid 5007] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./20/binderfs") = 0 [pid 5007] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./20/file0") = 0 [pid 5007] umount2("./20/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./20/cgroup") = 0 [pid 5007] umount2("./20/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./20/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./20") = 0 [pid 5007] mkdir("./21", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 65 ./strace-static-x86_64: Process 5425 attached [pid 5425] set_robust_list(0x5555571235e0, 24) = 0 [pid 5425] chdir("./21") = 0 [pid 5425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5425] setpgid(0, 0) = 0 [pid 5425] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5425] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5425] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5425] write(3, "1000", 4) = 4 [pid 5425] close(3) = 0 [pid 5425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5425] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5425] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5426 attached , parent_tid=[66], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 66 [pid 5426] set_robust_list(0x7fd090fc79e0, 24 [pid 5425] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... set_robust_list resumed>) = 0 [pid 5425] <... futex resumed>) = 0 [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5426] memfd_create("syzkaller", 0) = 3 [pid 5426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5426] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5426] close(3) = 0 [pid 5426] mkdir("./file0", 0777) = 0 [ 96.432358][ T5426] loop0: detected capacity change from 0 to 32768 [ 96.443669][ T5426] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5426) [ 96.460693][ T5426] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 96.469540][ T5426] BTRFS info (device loop0): using free space tree [pid 5426] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5426] chdir("./file0") = 0 [pid 5426] ioctl(4, LOOP_CLR_FD) = 0 [pid 5426] close(4) = 0 [pid 5426] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5425] <... futex resumed>) = 0 [pid 5426] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5425] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5426] <... openat resumed>) = 4 [pid 5426] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5425] <... futex resumed>) = 0 [pid 5426] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5425] <... futex resumed>) = 0 [pid 5426] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 96.489286][ T5426] BTRFS info (device loop0): enabling ssd optimizations [ 96.496680][ T5426] BTRFS info (device loop0): auto enabling async discard [pid 5425] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5425] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5425] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5425] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5443 attached [pid 5443] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5443] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] <... clone resumed>, parent_tid=[67], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 67 [pid 5425] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5425] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5443] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5425] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 96.541426][ T5426] BTRFS info (device loop0): balance: start -s [ 96.551290][ T5426] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5425] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5426] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5426] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 96.606012][ T5426] BTRFS info (device loop0): balance: ended with status: 0 [pid 5426] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] <... ioctl resumed>) = 0 [pid 5443] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] close(3) = 0 [pid 5425] close(4) = 0 [pid 5425] close(5) = 0 [pid 5425] close(6) = -1 EBADF (Bad file descriptor) [pid 5425] close(7) = -1 EBADF (Bad file descriptor) [pid 5425] close(8) = -1 EBADF (Bad file descriptor) [pid 5425] close(9) = -1 EBADF (Bad file descriptor) [pid 5425] close(10) = -1 EBADF (Bad file descriptor) [pid 5425] close(11) = -1 EBADF (Bad file descriptor) [pid 5425] close(12) = -1 EBADF (Bad file descriptor) [pid 5425] close(13) = -1 EBADF (Bad file descriptor) [pid 5425] close(14) = -1 EBADF (Bad file descriptor) [pid 5425] close(15) = -1 EBADF (Bad file descriptor) [pid 5425] close(16) = -1 EBADF (Bad file descriptor) [pid 5425] close(17) = -1 EBADF (Bad file descriptor) [pid 5425] close(18) = -1 EBADF (Bad file descriptor) [pid 5425] close(19) = -1 EBADF (Bad file descriptor) [pid 5425] close(20) = -1 EBADF (Bad file descriptor) [pid 5425] close(21) = -1 EBADF (Bad file descriptor) [pid 5425] close(22) = -1 EBADF (Bad file descriptor) [pid 5425] close(23) = -1 EBADF (Bad file descriptor) [pid 5425] close(24) = -1 EBADF (Bad file descriptor) [pid 5425] close(25) = -1 EBADF (Bad file descriptor) [pid 5425] close(26) = -1 EBADF (Bad file descriptor) [pid 5425] close(27) = -1 EBADF (Bad file descriptor) [pid 5425] close(28) = -1 EBADF (Bad file descriptor) [pid 5425] close(29) = -1 EBADF (Bad file descriptor) [pid 5425] exit_group(0 [pid 5443] <... futex resumed>) = ? [pid 5426] <... futex resumed>) = ? [pid 5425] <... exit_group resumed>) = ? [pid 5443] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 5425] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./21/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./21/cgroup.cpu") = 0 [pid 5007] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./21/binderfs") = 0 [pid 5007] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./21/file0") = 0 [pid 5007] umount2("./21/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./21/cgroup") = 0 [pid 5007] umount2("./21/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./21/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./21") = 0 [pid 5007] mkdir("./22", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5444 attached [pid 5444] set_robust_list(0x5555571235e0, 24) = 0 [pid 5444] chdir("./22" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 68 [pid 5444] <... chdir resumed>) = 0 [pid 5444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5444] setpgid(0, 0) = 0 [pid 5444] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5444] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5444] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5444] write(3, "1000", 4) = 4 [pid 5444] close(3) = 0 [pid 5444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5444] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5444] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5445 attached [pid 5445] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] <... clone resumed>, parent_tid=[69], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 69 [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5444] <... futex resumed>) = 1 [pid 5445] memfd_create("syzkaller", 0 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5445] <... memfd_create resumed>) = 3 [pid 5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5445] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5445] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5445] close(3) = 0 [pid 5445] mkdir("./file0", 0777) = 0 [ 97.121243][ T5445] loop0: detected capacity change from 0 to 32768 [ 97.132506][ T5445] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5445) [ 97.149596][ T5445] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 97.158921][ T5445] BTRFS info (device loop0): using free space tree [pid 5445] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5445] chdir("./file0") = 0 [pid 5445] ioctl(4, LOOP_CLR_FD) = 0 [pid 5445] close(4) = 0 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5445] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] <... openat resumed>) = 4 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5444] <... futex resumed>) = 0 [pid 5445] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 97.178556][ T5445] BTRFS info (device loop0): enabling ssd optimizations [ 97.185716][ T5445] BTRFS info (device loop0): auto enabling async discard [ 97.236796][ T5445] BTRFS info (device loop0): balance: start -s [ 97.245828][ T5445] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5444] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5444] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5444] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[70], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 70 [pid 5444] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5444] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5462 attached [pid 5462] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5462] openat(AT_FDCWD, ".", O_RDONLY [pid 5445] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5462] <... openat resumed>) = 5 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5462] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... futex resumed>) = 0 [pid 5444] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] <... futex resumed>) = 0 [pid 5445] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5462] <... futex resumed>) = 1 [ 97.279649][ T5445] BTRFS info (device loop0): balance: ended with status: 0 [pid 5462] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5444] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5445] <... ioctl resumed>) = 0 [pid 5445] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] close(3 [pid 5445] <... futex resumed>) = 0 [pid 5444] <... close resumed>) = 0 [pid 5445] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] close(4) = 0 [pid 5444] close(5) = 0 [pid 5444] close(6) = -1 EBADF (Bad file descriptor) [pid 5444] close(7) = -1 EBADF (Bad file descriptor) [pid 5444] close(8) = -1 EBADF (Bad file descriptor) [pid 5444] close(9) = -1 EBADF (Bad file descriptor) [pid 5444] close(10) = -1 EBADF (Bad file descriptor) [pid 5444] close(11) = -1 EBADF (Bad file descriptor) [pid 5444] close(12) = -1 EBADF (Bad file descriptor) [pid 5444] close(13) = -1 EBADF (Bad file descriptor) [pid 5444] close(14) = -1 EBADF (Bad file descriptor) [pid 5444] close(15) = -1 EBADF (Bad file descriptor) [pid 5444] close(16) = -1 EBADF (Bad file descriptor) [pid 5444] close(17) = -1 EBADF (Bad file descriptor) [pid 5444] close(18) = -1 EBADF (Bad file descriptor) [pid 5444] close(19) = -1 EBADF (Bad file descriptor) [pid 5444] close(20) = -1 EBADF (Bad file descriptor) [pid 5444] close(21) = -1 EBADF (Bad file descriptor) [pid 5444] close(22) = -1 EBADF (Bad file descriptor) [pid 5444] close(23) = -1 EBADF (Bad file descriptor) [pid 5444] close(24) = -1 EBADF (Bad file descriptor) [pid 5444] close(25) = -1 EBADF (Bad file descriptor) [pid 5444] close(26) = -1 EBADF (Bad file descriptor) [pid 5444] close(27) = -1 EBADF (Bad file descriptor) [pid 5444] close(28) = -1 EBADF (Bad file descriptor) [pid 5444] close(29) = -1 EBADF (Bad file descriptor) [pid 5444] exit_group(0 [pid 5462] <... futex resumed>) = ? [pid 5445] <... futex resumed>) = ? [pid 5444] <... exit_group resumed>) = ? [pid 5462] +++ exited with 0 +++ [pid 5445] +++ exited with 0 +++ [pid 5444] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./22/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./22/cgroup.cpu") = 0 [pid 5007] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./22/binderfs") = 0 [pid 5007] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./22/file0") = 0 [pid 5007] umount2("./22/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./22/cgroup") = 0 [pid 5007] umount2("./22/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./22/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./22") = 0 [pid 5007] mkdir("./23", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5463 attached [pid 5463] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 71 [pid 5463] <... set_robust_list resumed>) = 0 [pid 5463] chdir("./23") = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5463] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5463] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5463] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5463] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5464 attached [pid 5464] set_robust_list(0x7fd090fc79e0, 24 [pid 5463] <... clone resumed>, parent_tid=[72], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 72 [pid 5464] <... set_robust_list resumed>) = 0 [pid 5463] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5464] memfd_create("syzkaller", 0) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5464] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5464] close(3) = 0 [pid 5464] mkdir("./file0", 0777) = 0 [ 97.802342][ T5464] loop0: detected capacity change from 0 to 32768 [ 97.813449][ T5464] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5464) [ 97.830667][ T5464] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 97.839868][ T5464] BTRFS info (device loop0): using free space tree [pid 5464] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5464] chdir("./file0") = 0 [pid 5464] ioctl(4, LOOP_CLR_FD) = 0 [pid 5464] close(4) = 0 [pid 5464] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5464] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = 0 [pid 5463] <... futex resumed>) = 1 [pid 5464] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... openat resumed>) = 4 [pid 5464] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5464] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5463] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 97.860014][ T5464] BTRFS info (device loop0): enabling ssd optimizations [ 97.867281][ T5464] BTRFS info (device loop0): auto enabling async discard [pid 5463] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5463] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5463] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5481 attached [pid 5481] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5481] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... clone resumed>, parent_tid=[73], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 73 [pid 5463] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5481] <... futex resumed>) = 0 [pid 5481] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5481] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5463] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5463] <... futex resumed>) = 0 [ 97.915780][ T5464] BTRFS info (device loop0): balance: start -s [ 97.924103][ T5464] BTRFS info (device loop0): relocating block group 1048576 flags system [ 97.955113][ T5464] BTRFS info (device loop0): balance: ended with status: 0 [pid 5463] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5464] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5464] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5481] <... ioctl resumed>) = 0 [pid 5481] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] close(3 [pid 5481] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... close resumed>) = 0 [pid 5463] close(4) = 0 [pid 5463] close(5) = 0 [pid 5463] close(6) = -1 EBADF (Bad file descriptor) [pid 5463] close(7) = -1 EBADF (Bad file descriptor) [pid 5463] close(8) = -1 EBADF (Bad file descriptor) [pid 5463] close(9) = -1 EBADF (Bad file descriptor) [pid 5463] close(10) = -1 EBADF (Bad file descriptor) [pid 5463] close(11) = -1 EBADF (Bad file descriptor) [pid 5463] close(12) = -1 EBADF (Bad file descriptor) [pid 5463] close(13) = -1 EBADF (Bad file descriptor) [pid 5463] close(14) = -1 EBADF (Bad file descriptor) [pid 5463] close(15) = -1 EBADF (Bad file descriptor) [pid 5463] close(16) = -1 EBADF (Bad file descriptor) [pid 5463] close(17) = -1 EBADF (Bad file descriptor) [pid 5463] close(18) = -1 EBADF (Bad file descriptor) [pid 5463] close(19) = -1 EBADF (Bad file descriptor) [pid 5463] close(20) = -1 EBADF (Bad file descriptor) [pid 5463] close(21) = -1 EBADF (Bad file descriptor) [pid 5463] close(22) = -1 EBADF (Bad file descriptor) [pid 5463] close(23) = -1 EBADF (Bad file descriptor) [pid 5463] close(24) = -1 EBADF (Bad file descriptor) [pid 5463] close(25) = -1 EBADF (Bad file descriptor) [pid 5463] close(26) = -1 EBADF (Bad file descriptor) [pid 5463] close(27) = -1 EBADF (Bad file descriptor) [pid 5463] close(28) = -1 EBADF (Bad file descriptor) [pid 5463] close(29) = -1 EBADF (Bad file descriptor) [pid 5463] exit_group(0 [pid 5481] <... futex resumed>) = ? [pid 5464] <... futex resumed>) = ? [pid 5481] +++ exited with 0 +++ [pid 5464] +++ exited with 0 +++ [pid 5463] <... exit_group resumed>) = ? [pid 5463] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./23/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./23/cgroup.cpu") = 0 [pid 5007] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./23/binderfs") = 0 [pid 5007] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./23/file0") = 0 [pid 5007] umount2("./23/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./23/cgroup") = 0 [pid 5007] umount2("./23/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./23/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./23") = 0 [pid 5007] mkdir("./24", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 74 ./strace-static-x86_64: Process 5482 attached [pid 5482] set_robust_list(0x5555571235e0, 24) = 0 [pid 5482] chdir("./24") = 0 [pid 5482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5482] setpgid(0, 0) = 0 [pid 5482] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5482] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5482] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5482] write(3, "1000", 4) = 4 [pid 5482] close(3) = 0 [pid 5482] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5482] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5482] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5483 attached [pid 5483] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... clone resumed>, parent_tid=[75], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 75 [pid 5482] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = 0 [pid 5482] <... futex resumed>) = 1 [pid 5483] memfd_create("syzkaller", 0 [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5483] <... memfd_create resumed>) = 3 [pid 5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5483] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5483] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5483] close(3) = 0 [pid 5483] mkdir("./file0", 0777) = 0 [ 98.493033][ T5483] loop0: detected capacity change from 0 to 32768 [ 98.503052][ T5483] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5483) [ 98.521381][ T5483] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 98.530921][ T5483] BTRFS info (device loop0): using free space tree [pid 5483] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5483] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5483] chdir("./file0") = 0 [pid 5483] ioctl(4, LOOP_CLR_FD) = 0 [pid 5483] close(4) = 0 [pid 5483] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5483] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] <... openat resumed>) = 4 [pid 5483] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5483] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 98.551053][ T5483] BTRFS info (device loop0): enabling ssd optimizations [ 98.558278][ T5483] BTRFS info (device loop0): auto enabling async discard [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5482] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5482] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5482] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5482] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x7fd089ba69e0, 24 [pid 5482] <... clone resumed>, parent_tid=[76], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 76 [pid 5500] <... set_robust_list resumed>) = 0 [pid 5482] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] openat(AT_FDCWD, ".", O_RDONLY [pid 5482] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... openat resumed>) = 5 [pid 5500] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 98.598662][ T5483] BTRFS info (device loop0): balance: start -s [ 98.608406][ T5483] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5500] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... futex resumed>) = 0 [pid 5482] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5500] <... futex resumed>) = 0 [pid 5482] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 98.646034][ T5483] BTRFS info (device loop0): balance: ended with status: 0 [pid 5483] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5483] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5483] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5500] <... ioctl resumed>) = 0 [pid 5500] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] close(3 [pid 5500] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] <... close resumed>) = 0 [pid 5482] close(4) = 0 [pid 5482] close(5) = 0 [pid 5482] close(6) = -1 EBADF (Bad file descriptor) [pid 5482] close(7) = -1 EBADF (Bad file descriptor) [pid 5482] close(8) = -1 EBADF (Bad file descriptor) [pid 5482] close(9) = -1 EBADF (Bad file descriptor) [pid 5482] close(10) = -1 EBADF (Bad file descriptor) [pid 5482] close(11) = -1 EBADF (Bad file descriptor) [pid 5482] close(12) = -1 EBADF (Bad file descriptor) [pid 5482] close(13) = -1 EBADF (Bad file descriptor) [pid 5482] close(14) = -1 EBADF (Bad file descriptor) [pid 5482] close(15) = -1 EBADF (Bad file descriptor) [pid 5482] close(16) = -1 EBADF (Bad file descriptor) [pid 5482] close(17) = -1 EBADF (Bad file descriptor) [pid 5482] close(18) = -1 EBADF (Bad file descriptor) [pid 5482] close(19) = -1 EBADF (Bad file descriptor) [pid 5482] close(20) = -1 EBADF (Bad file descriptor) [pid 5482] close(21) = -1 EBADF (Bad file descriptor) [pid 5482] close(22) = -1 EBADF (Bad file descriptor) [pid 5482] close(23) = -1 EBADF (Bad file descriptor) [pid 5482] close(24) = -1 EBADF (Bad file descriptor) [pid 5482] close(25) = -1 EBADF (Bad file descriptor) [pid 5482] close(26) = -1 EBADF (Bad file descriptor) [pid 5482] close(27) = -1 EBADF (Bad file descriptor) [pid 5482] close(28) = -1 EBADF (Bad file descriptor) [pid 5482] close(29) = -1 EBADF (Bad file descriptor) [pid 5482] exit_group(0 [pid 5483] <... futex resumed>) = ? [pid 5500] <... futex resumed>) = ? [pid 5482] <... exit_group resumed>) = ? [pid 5483] +++ exited with 0 +++ [pid 5500] +++ exited with 0 +++ [pid 5482] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./24/cgroup.cpu") = 0 [pid 5007] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./24/binderfs") = 0 [pid 5007] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./24/file0") = 0 [pid 5007] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./24/cgroup") = 0 [pid 5007] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./24/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./24") = 0 [pid 5007] mkdir("./25", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5501 attached , child_tidptr=0x5555571235d0) = 77 [pid 5501] set_robust_list(0x5555571235e0, 24) = 0 [pid 5501] chdir("./25") = 0 [pid 5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5501] setpgid(0, 0) = 0 [pid 5501] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5501] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5501] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5501] write(3, "1000", 4) = 4 [pid 5501] close(3) = 0 [pid 5501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5501] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5501] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[78], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 78 [pid 5501] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5502 attached ) = 0 [pid 5502] set_robust_list(0x7fd090fc79e0, 24 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5502] <... set_robust_list resumed>) = 0 [pid 5502] memfd_create("syzkaller", 0) = 3 [pid 5502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5502] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5502] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5502] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5502] close(3) = 0 [pid 5502] mkdir("./file0", 0777) = 0 [ 99.157817][ T5502] loop0: detected capacity change from 0 to 32768 [ 99.169084][ T5502] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5502) [ 99.186781][ T5502] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.195768][ T5502] BTRFS info (device loop0): using free space tree [pid 5502] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5502] chdir("./file0") = 0 [pid 5502] ioctl(4, LOOP_CLR_FD) = 0 [pid 5502] close(4) = 0 [pid 5502] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5502] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] <... futex resumed>) = 0 [pid 5501] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 1 [pid 5502] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... openat resumed>) = 4 [pid 5502] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5502] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 1 [pid 5501] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 99.215661][ T5502] BTRFS info (device loop0): enabling ssd optimizations [ 99.222800][ T5502] BTRFS info (device loop0): auto enabling async discard [pid 5502] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5501] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5501] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5501] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5519 attached [pid 5519] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5501] <... clone resumed>, parent_tid=[79], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 79 [pid 5501] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] openat(AT_FDCWD, ".", O_RDONLY [pid 5501] <... futex resumed>) = 0 [pid 5501] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... openat resumed>) = 5 [pid 5519] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5519] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] <... futex resumed>) = 0 [ 99.266391][ T5502] BTRFS info (device loop0): balance: start -s [ 99.276252][ T5502] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5501] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5501] <... futex resumed>) = 1 [pid 5519] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5501] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5502] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 99.319704][ T5502] BTRFS info (device loop0): balance: ended with status: 0 [pid 5519] <... ioctl resumed>) = 0 [pid 5519] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5519] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] close(3) = 0 [pid 5501] close(4) = 0 [pid 5501] close(5) = 0 [pid 5501] close(6) = -1 EBADF (Bad file descriptor) [pid 5501] close(7) = -1 EBADF (Bad file descriptor) [pid 5501] close(8) = -1 EBADF (Bad file descriptor) [pid 5501] close(9) = -1 EBADF (Bad file descriptor) [pid 5501] close(10) = -1 EBADF (Bad file descriptor) [pid 5501] close(11) = -1 EBADF (Bad file descriptor) [pid 5501] close(12) = -1 EBADF (Bad file descriptor) [pid 5501] close(13) = -1 EBADF (Bad file descriptor) [pid 5501] close(14) = -1 EBADF (Bad file descriptor) [pid 5501] close(15) = -1 EBADF (Bad file descriptor) [pid 5501] close(16) = -1 EBADF (Bad file descriptor) [pid 5501] close(17) = -1 EBADF (Bad file descriptor) [pid 5501] close(18) = -1 EBADF (Bad file descriptor) [pid 5501] close(19) = -1 EBADF (Bad file descriptor) [pid 5501] close(20) = -1 EBADF (Bad file descriptor) [pid 5501] close(21) = -1 EBADF (Bad file descriptor) [pid 5501] close(22) = -1 EBADF (Bad file descriptor) [pid 5501] close(23) = -1 EBADF (Bad file descriptor) [pid 5501] close(24) = -1 EBADF (Bad file descriptor) [pid 5501] close(25) = -1 EBADF (Bad file descriptor) [pid 5501] close(26) = -1 EBADF (Bad file descriptor) [pid 5501] close(27) = -1 EBADF (Bad file descriptor) [pid 5501] close(28) = -1 EBADF (Bad file descriptor) [pid 5501] close(29) = -1 EBADF (Bad file descriptor) [pid 5501] exit_group(0) = ? [pid 5502] <... futex resumed>) = ? [pid 5519] <... futex resumed>) = ? [pid 5519] +++ exited with 0 +++ [pid 5502] +++ exited with 0 +++ [pid 5501] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./25/cgroup.cpu") = 0 [pid 5007] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./25/binderfs") = 0 [pid 5007] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./25/file0") = 0 [pid 5007] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./25/cgroup") = 0 [pid 5007] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./25/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./25") = 0 [pid 5007] mkdir("./26", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 80 ./strace-static-x86_64: Process 5520 attached [pid 5520] set_robust_list(0x5555571235e0, 24) = 0 [pid 5520] chdir("./26") = 0 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5520] setpgid(0, 0) = 0 [pid 5520] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5520] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5520] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5520] write(3, "1000", 4) = 4 [pid 5520] close(3) = 0 [pid 5520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5520] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5521 attached [pid 5521] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5521] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] <... clone resumed>, parent_tid=[81], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 81 [pid 5520] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = 1 [pid 5521] memfd_create("syzkaller", 0 [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5521] <... memfd_create resumed>) = 3 [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5521] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5521] close(3) = 0 [pid 5521] mkdir("./file0", 0777) = 0 [ 99.834319][ T5521] loop0: detected capacity change from 0 to 32768 [ 99.846135][ T5521] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5521) [ 99.863753][ T5521] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.872595][ T5521] BTRFS info (device loop0): using free space tree [pid 5521] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5521] chdir("./file0") = 0 [pid 5521] ioctl(4, LOOP_CLR_FD) = 0 [pid 5521] close(4) = 0 [pid 5521] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5521] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5520] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... openat resumed>) = 4 [pid 5520] <... futex resumed>) = 0 [pid 5521] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5521] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5521] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5520] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.892610][ T5521] BTRFS info (device loop0): enabling ssd optimizations [ 99.899970][ T5521] BTRFS info (device loop0): auto enabling async discard [ 99.928822][ T5521] BTRFS info (device loop0): balance: start -s [ 99.938584][ T5521] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5520] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5520] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5520] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5520] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5538 attached , parent_tid=[82], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 82 [pid 5520] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5538] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5538] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5538] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5520] <... futex resumed>) = 0 [pid 5538] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5520] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.974403][ T5521] BTRFS info (device loop0): balance: ended with status: 0 [pid 5520] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5521] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5521] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] <... ioctl resumed>) = 0 [pid 5538] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5520] close(3) = 0 [pid 5520] close(4) = 0 [pid 5520] close(5) = 0 [pid 5520] close(6) = -1 EBADF (Bad file descriptor) [pid 5520] close(7) = -1 EBADF (Bad file descriptor) [pid 5520] close(8) = -1 EBADF (Bad file descriptor) [pid 5520] close(9) = -1 EBADF (Bad file descriptor) [pid 5520] close(10) = -1 EBADF (Bad file descriptor) [pid 5520] close(11) = -1 EBADF (Bad file descriptor) [pid 5520] close(12) = -1 EBADF (Bad file descriptor) [pid 5520] close(13) = -1 EBADF (Bad file descriptor) [pid 5520] close(14) = -1 EBADF (Bad file descriptor) [pid 5520] close(15) = -1 EBADF (Bad file descriptor) [pid 5520] close(16) = -1 EBADF (Bad file descriptor) [pid 5520] close(17) = -1 EBADF (Bad file descriptor) [pid 5520] close(18) = -1 EBADF (Bad file descriptor) [pid 5520] close(19) = -1 EBADF (Bad file descriptor) [pid 5520] close(20) = -1 EBADF (Bad file descriptor) [pid 5520] close(21) = -1 EBADF (Bad file descriptor) [pid 5520] close(22) = -1 EBADF (Bad file descriptor) [pid 5520] close(23) = -1 EBADF (Bad file descriptor) [pid 5520] close(24) = -1 EBADF (Bad file descriptor) [pid 5520] close(25) = -1 EBADF (Bad file descriptor) [pid 5520] close(26) = -1 EBADF (Bad file descriptor) [pid 5520] close(27) = -1 EBADF (Bad file descriptor) [pid 5520] close(28) = -1 EBADF (Bad file descriptor) [pid 5520] close(29) = -1 EBADF (Bad file descriptor) [pid 5520] exit_group(0 [pid 5538] <... futex resumed>) = ? [pid 5521] <... futex resumed>) = ? [pid 5520] <... exit_group resumed>) = ? [pid 5538] +++ exited with 0 +++ [pid 5521] +++ exited with 0 +++ [pid 5520] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./26/cgroup.cpu") = 0 [pid 5007] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./26/binderfs") = 0 [pid 5007] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./26/file0") = 0 [pid 5007] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./26/cgroup") = 0 [pid 5007] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./26/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./26") = 0 [pid 5007] mkdir("./27", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5539 attached , child_tidptr=0x5555571235d0) = 83 [pid 5539] set_robust_list(0x5555571235e0, 24) = 0 [pid 5539] chdir("./27") = 0 [pid 5539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5539] setpgid(0, 0) = 0 [pid 5539] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5539] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5539] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5539] write(3, "1000", 4) = 4 [pid 5539] close(3) = 0 [pid 5539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5539] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5540 attached , parent_tid=[84], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 84 [pid 5540] set_robust_list(0x7fd090fc79e0, 24 [pid 5539] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... set_robust_list resumed>) = 0 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5540] memfd_create("syzkaller", 0) = 3 [pid 5540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5540] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5540] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5540] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5540] close(3) = 0 [pid 5540] mkdir("./file0", 0777) = 0 [ 100.505562][ T5540] loop0: detected capacity change from 0 to 32768 [ 100.516268][ T5540] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5540) [ 100.531604][ T5540] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 100.540476][ T5540] BTRFS info (device loop0): using free space tree [pid 5540] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5540] chdir("./file0") = 0 [pid 5540] ioctl(4, LOOP_CLR_FD) = 0 [pid 5540] close(4) = 0 [pid 5540] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5540] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5539] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... openat resumed>) = 4 [pid 5540] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5540] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5539] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 100.562204][ T5540] BTRFS info (device loop0): enabling ssd optimizations [ 100.569456][ T5540] BTRFS info (device loop0): auto enabling async discard [pid 5539] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5539] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5539] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5557 attached [pid 5557] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5557] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... clone resumed>, parent_tid=[85], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 85 [pid 5539] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 5539] <... futex resumed>) = 1 [pid 5557] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5539] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5557] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5539] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5557] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5539] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [ 100.622184][ T5540] BTRFS info (device loop0): balance: start -s [ 100.631277][ T5540] BTRFS info (device loop0): relocating block group 1048576 flags system [ 100.659696][ T5540] BTRFS info (device loop0): balance: ended with status: 0 [pid 5540] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5557] <... ioctl resumed>) = 0 [pid 5557] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] close(3 [pid 5557] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] <... close resumed>) = 0 [pid 5539] close(4) = 0 [pid 5539] close(5) = 0 [pid 5539] close(6) = -1 EBADF (Bad file descriptor) [pid 5539] close(7) = -1 EBADF (Bad file descriptor) [pid 5539] close(8) = -1 EBADF (Bad file descriptor) [pid 5539] close(9) = -1 EBADF (Bad file descriptor) [pid 5539] close(10) = -1 EBADF (Bad file descriptor) [pid 5539] close(11) = -1 EBADF (Bad file descriptor) [pid 5539] close(12) = -1 EBADF (Bad file descriptor) [pid 5539] close(13) = -1 EBADF (Bad file descriptor) [pid 5539] close(14) = -1 EBADF (Bad file descriptor) [pid 5539] close(15) = -1 EBADF (Bad file descriptor) [pid 5539] close(16) = -1 EBADF (Bad file descriptor) [pid 5539] close(17) = -1 EBADF (Bad file descriptor) [pid 5539] close(18) = -1 EBADF (Bad file descriptor) [pid 5539] close(19) = -1 EBADF (Bad file descriptor) [pid 5539] close(20) = -1 EBADF (Bad file descriptor) [pid 5539] close(21) = -1 EBADF (Bad file descriptor) [pid 5539] close(22) = -1 EBADF (Bad file descriptor) [pid 5539] close(23) = -1 EBADF (Bad file descriptor) [pid 5539] close(24) = -1 EBADF (Bad file descriptor) [pid 5539] close(25) = -1 EBADF (Bad file descriptor) [pid 5539] close(26) = -1 EBADF (Bad file descriptor) [pid 5539] close(27) = -1 EBADF (Bad file descriptor) [pid 5539] close(28) = -1 EBADF (Bad file descriptor) [pid 5539] close(29) = -1 EBADF (Bad file descriptor) [pid 5539] exit_group(0 [pid 5557] <... futex resumed>) = ? [pid 5540] <... futex resumed>) = ? [pid 5539] <... exit_group resumed>) = ? [pid 5557] +++ exited with 0 +++ [pid 5540] +++ exited with 0 +++ [pid 5539] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./27/cgroup.cpu") = 0 [pid 5007] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./27/binderfs") = 0 [pid 5007] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./27/file0") = 0 [pid 5007] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./27/cgroup") = 0 [pid 5007] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./27/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./27") = 0 [pid 5007] mkdir("./28", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 86 ./strace-static-x86_64: Process 5558 attached [pid 5558] set_robust_list(0x5555571235e0, 24) = 0 [pid 5558] chdir("./28") = 0 [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5558] setpgid(0, 0) = 0 [pid 5558] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5558] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5558] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5558] write(3, "1000", 4) = 4 [pid 5558] close(3) = 0 [pid 5558] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5558] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5558] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[87], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 87 [pid 5558] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5559 attached [pid 5559] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5559] memfd_create("syzkaller", 0) = 3 [pid 5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5559] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5559] close(3) = 0 [pid 5559] mkdir("./file0", 0777) = 0 [ 101.177938][ T5559] loop0: detected capacity change from 0 to 32768 [ 101.190416][ T5559] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5559) [ 101.208286][ T5559] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.217323][ T5559] BTRFS info (device loop0): using free space tree [pid 5559] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5559] chdir("./file0") = 0 [pid 5559] ioctl(4, LOOP_CLR_FD) = 0 [pid 5559] close(4) = 0 [pid 5559] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5559] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5558] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] <... openat resumed>) = 4 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] <... futex resumed>) = 0 [pid 5558] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] <... futex resumed>) = 1 [ 101.238530][ T5559] BTRFS info (device loop0): enabling ssd optimizations [ 101.246006][ T5559] BTRFS info (device loop0): auto enabling async discard [ 101.270992][ T5559] BTRFS info (device loop0): balance: start -s [ 101.280788][ T5559] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5559] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5558] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5558] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5558] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5576 attached [pid 5576] set_robust_list(0x7fd089ba69e0, 24 [pid 5558] <... clone resumed>, parent_tid=[88], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 88 [pid 5576] <... set_robust_list resumed>) = 0 [pid 5558] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] openat(AT_FDCWD, ".", O_RDONLY [pid 5558] <... futex resumed>) = 0 [pid 5576] <... openat resumed>) = 5 [pid 5558] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5576] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5558] <... futex resumed>) = 0 [pid 5576] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 101.310971][ T5559] BTRFS info (device loop0): balance: ended with status: 0 [pid 5558] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5559] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5559] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5576] <... ioctl resumed>) = 0 [pid 5576] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] close(3) = 0 [pid 5558] close(4) = 0 [pid 5558] close(5) = 0 [pid 5558] close(6) = -1 EBADF (Bad file descriptor) [pid 5558] close(7) = -1 EBADF (Bad file descriptor) [pid 5558] close(8) = -1 EBADF (Bad file descriptor) [pid 5558] close(9) = -1 EBADF (Bad file descriptor) [pid 5558] close(10) = -1 EBADF (Bad file descriptor) [pid 5558] close(11) = -1 EBADF (Bad file descriptor) [pid 5558] close(12) = -1 EBADF (Bad file descriptor) [pid 5558] close(13) = -1 EBADF (Bad file descriptor) [pid 5558] close(14) = -1 EBADF (Bad file descriptor) [pid 5558] close(15) = -1 EBADF (Bad file descriptor) [pid 5558] close(16) = -1 EBADF (Bad file descriptor) [pid 5558] close(17) = -1 EBADF (Bad file descriptor) [pid 5558] close(18) = -1 EBADF (Bad file descriptor) [pid 5558] close(19) = -1 EBADF (Bad file descriptor) [pid 5558] close(20) = -1 EBADF (Bad file descriptor) [pid 5558] close(21) = -1 EBADF (Bad file descriptor) [pid 5558] close(22) = -1 EBADF (Bad file descriptor) [pid 5558] close(23) = -1 EBADF (Bad file descriptor) [pid 5558] close(24) = -1 EBADF (Bad file descriptor) [pid 5558] close(25) = -1 EBADF (Bad file descriptor) [pid 5558] close(26) = -1 EBADF (Bad file descriptor) [pid 5558] close(27) = -1 EBADF (Bad file descriptor) [pid 5558] close(28) = -1 EBADF (Bad file descriptor) [pid 5558] close(29) = -1 EBADF (Bad file descriptor) [pid 5558] exit_group(0 [pid 5576] <... futex resumed>) = ? [pid 5559] <... futex resumed>) = ? [pid 5558] <... exit_group resumed>) = ? [pid 5576] +++ exited with 0 +++ [pid 5559] +++ exited with 0 +++ [pid 5558] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./28/cgroup.cpu") = 0 [pid 5007] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./28/binderfs") = 0 [pid 5007] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./28/file0") = 0 [pid 5007] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./28/cgroup") = 0 [pid 5007] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./28/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./28") = 0 [pid 5007] mkdir("./29", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 89 ./strace-static-x86_64: Process 5577 attached [pid 5577] set_robust_list(0x5555571235e0, 24) = 0 [pid 5577] chdir("./29") = 0 [pid 5577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5577] setpgid(0, 0) = 0 [pid 5577] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5577] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5577] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5577] write(3, "1000", 4) = 4 [pid 5577] close(3) = 0 [pid 5577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5577] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[90], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 90 ./strace-static-x86_64: Process 5578 attached [pid 5578] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5578] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5578] <... futex resumed>) = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5578] memfd_create("syzkaller", 0) = 3 [pid 5578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5578] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5578] close(3) = 0 [pid 5578] mkdir("./file0", 0777) = 0 [ 101.835183][ T5578] loop0: detected capacity change from 0 to 32768 [ 101.846495][ T5578] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5578) [ 101.864254][ T5578] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.873383][ T5578] BTRFS info (device loop0): using free space tree [pid 5578] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5578] chdir("./file0") = 0 [pid 5578] ioctl(4, LOOP_CLR_FD) = 0 [pid 5578] close(4) = 0 [pid 5578] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5578] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 101.893357][ T5578] BTRFS info (device loop0): enabling ssd optimizations [ 101.900546][ T5578] BTRFS info (device loop0): auto enabling async discard [pid 5578] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5577] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5577] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5577] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5577] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[91], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 91 [pid 5577] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5595 attached [pid 5595] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5595] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5595] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5595] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 101.950223][ T5578] BTRFS info (device loop0): balance: start -s [ 101.960276][ T5578] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5577] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5577] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... futex resumed>) = 0 [pid 5577] <... futex resumed>) = 1 [pid 5595] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5577] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5578] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5578] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5578] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 102.008121][ T5578] BTRFS info (device loop0): balance: ended with status: 0 [pid 5595] <... ioctl resumed>) = 0 [pid 5595] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] close(3 [pid 5595] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] <... close resumed>) = 0 [pid 5577] close(4) = 0 [pid 5577] close(5) = 0 [pid 5577] close(6) = -1 EBADF (Bad file descriptor) [pid 5577] close(7) = -1 EBADF (Bad file descriptor) [pid 5577] close(8) = -1 EBADF (Bad file descriptor) [pid 5577] close(9) = -1 EBADF (Bad file descriptor) [pid 5577] close(10) = -1 EBADF (Bad file descriptor) [pid 5577] close(11) = -1 EBADF (Bad file descriptor) [pid 5577] close(12) = -1 EBADF (Bad file descriptor) [pid 5577] close(13) = -1 EBADF (Bad file descriptor) [pid 5577] close(14) = -1 EBADF (Bad file descriptor) [pid 5577] close(15) = -1 EBADF (Bad file descriptor) [pid 5577] close(16) = -1 EBADF (Bad file descriptor) [pid 5577] close(17) = -1 EBADF (Bad file descriptor) [pid 5577] close(18) = -1 EBADF (Bad file descriptor) [pid 5577] close(19) = -1 EBADF (Bad file descriptor) [pid 5577] close(20) = -1 EBADF (Bad file descriptor) [pid 5577] close(21) = -1 EBADF (Bad file descriptor) [pid 5577] close(22) = -1 EBADF (Bad file descriptor) [pid 5577] close(23) = -1 EBADF (Bad file descriptor) [pid 5577] close(24) = -1 EBADF (Bad file descriptor) [pid 5577] close(25) = -1 EBADF (Bad file descriptor) [pid 5577] close(26) = -1 EBADF (Bad file descriptor) [pid 5577] close(27) = -1 EBADF (Bad file descriptor) [pid 5577] close(28) = -1 EBADF (Bad file descriptor) [pid 5577] close(29) = -1 EBADF (Bad file descriptor) [pid 5577] exit_group(0 [pid 5595] <... futex resumed>) = ? [pid 5578] <... futex resumed>) = ? [pid 5595] +++ exited with 0 +++ [pid 5578] +++ exited with 0 +++ [pid 5577] <... exit_group resumed>) = ? [pid 5577] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./29/cgroup.cpu") = 0 [pid 5007] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./29/binderfs") = 0 [pid 5007] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./29/file0") = 0 [pid 5007] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./29/cgroup") = 0 [pid 5007] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./29/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./29") = 0 [pid 5007] mkdir("./30", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 92 ./strace-static-x86_64: Process 5596 attached [pid 5596] set_robust_list(0x5555571235e0, 24) = 0 [pid 5596] chdir("./30") = 0 [pid 5596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5596] setpgid(0, 0) = 0 [pid 5596] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5596] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5596] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5596] write(3, "1000", 4) = 4 [pid 5596] close(3) = 0 [pid 5596] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5596] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5596] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[93], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 93 [pid 5596] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5597 attached [pid 5597] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5597] memfd_create("syzkaller", 0) = 3 [pid 5597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5597] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5597] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5597] close(3) = 0 [pid 5597] mkdir("./file0", 0777) = 0 [ 102.532836][ T5597] loop0: detected capacity change from 0 to 32768 [ 102.543985][ T5597] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5597) [ 102.562391][ T5597] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 102.571447][ T5597] BTRFS info (device loop0): using free space tree [pid 5597] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5597] chdir("./file0") = 0 [pid 5597] ioctl(4, LOOP_CLR_FD) = 0 [pid 5597] close(4) = 0 [pid 5597] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5597] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5596] <... futex resumed>) = 0 [pid 5597] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5597] <... openat resumed>) = 4 [pid 5597] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5596] <... futex resumed>) = 0 [pid 5597] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5596] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.591522][ T5597] BTRFS info (device loop0): enabling ssd optimizations [ 102.598688][ T5597] BTRFS info (device loop0): auto enabling async discard [pid 5596] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5596] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.638533][ T5597] BTRFS info (device loop0): balance: start -s [ 102.648204][ T5597] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5596] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5596] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[94], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 94 [pid 5596] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5614 attached [pid 5614] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5614] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5614] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5596] <... futex resumed>) = 0 [pid 5596] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5596] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... futex resumed>) = 1 [pid 5614] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5597] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5597] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.681515][ T5597] BTRFS info (device loop0): balance: ended with status: 0 [pid 5597] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5614] <... ioctl resumed>) = 0 [pid 5614] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] close(3) = 0 [pid 5596] close(4) = 0 [pid 5596] close(5) = 0 [pid 5596] close(6) = -1 EBADF (Bad file descriptor) [pid 5596] close(7) = -1 EBADF (Bad file descriptor) [pid 5596] close(8) = -1 EBADF (Bad file descriptor) [pid 5596] close(9) = -1 EBADF (Bad file descriptor) [pid 5596] close(10) = -1 EBADF (Bad file descriptor) [pid 5596] close(11) = -1 EBADF (Bad file descriptor) [pid 5596] close(12) = -1 EBADF (Bad file descriptor) [pid 5596] close(13) = -1 EBADF (Bad file descriptor) [pid 5596] close(14) = -1 EBADF (Bad file descriptor) [pid 5596] close(15) = -1 EBADF (Bad file descriptor) [pid 5596] close(16) = -1 EBADF (Bad file descriptor) [pid 5596] close(17) = -1 EBADF (Bad file descriptor) [pid 5596] close(18) = -1 EBADF (Bad file descriptor) [pid 5596] close(19) = -1 EBADF (Bad file descriptor) [pid 5596] close(20) = -1 EBADF (Bad file descriptor) [pid 5596] close(21) = -1 EBADF (Bad file descriptor) [pid 5596] close(22) = -1 EBADF (Bad file descriptor) [pid 5596] close(23) = -1 EBADF (Bad file descriptor) [pid 5596] close(24) = -1 EBADF (Bad file descriptor) [pid 5596] close(25) = -1 EBADF (Bad file descriptor) [pid 5596] close(26) = -1 EBADF (Bad file descriptor) [pid 5596] close(27) = -1 EBADF (Bad file descriptor) [pid 5596] close(28) = -1 EBADF (Bad file descriptor) [pid 5596] close(29) = -1 EBADF (Bad file descriptor) [pid 5596] exit_group(0 [pid 5614] <... futex resumed>) = ? [pid 5597] <... futex resumed>) = ? [pid 5596] <... exit_group resumed>) = ? [pid 5614] +++ exited with 0 +++ [pid 5597] +++ exited with 0 +++ [pid 5596] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./30/cgroup.cpu") = 0 [pid 5007] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./30/binderfs") = 0 [pid 5007] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./30/file0") = 0 [pid 5007] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./30/cgroup") = 0 [pid 5007] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./30/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./30") = 0 [pid 5007] mkdir("./31", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5615 attached [pid 5615] set_robust_list(0x5555571235e0, 24) = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 95 [pid 5615] chdir("./31") = 0 [pid 5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5615] setpgid(0, 0) = 0 [pid 5615] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5615] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5615] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5615] write(3, "1000", 4) = 4 [pid 5615] close(3) = 0 [pid 5615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5615] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5615] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5616 attached [pid 5616] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... clone resumed>, parent_tid=[96], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 96 [pid 5615] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5616] <... futex resumed>) = 0 [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5616] memfd_create("syzkaller", 0) = 3 [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5616] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5616] close(3) = 0 [pid 5616] mkdir("./file0", 0777) = 0 [ 103.198391][ T5616] loop0: detected capacity change from 0 to 32768 [ 103.210067][ T5616] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5616) [ 103.227060][ T5616] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.235937][ T5616] BTRFS info (device loop0): using free space tree [pid 5616] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5616] chdir("./file0") = 0 [pid 5616] ioctl(4, LOOP_CLR_FD) = 0 [pid 5616] close(4) = 0 [pid 5616] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] <... futex resumed>) = 0 [pid 5616] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5616] <... openat resumed>) = 4 [pid 5616] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] <... futex resumed>) = 0 [pid 5616] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 103.256363][ T5616] BTRFS info (device loop0): enabling ssd optimizations [ 103.263473][ T5616] BTRFS info (device loop0): auto enabling async discard [ 103.309804][ T5616] BTRFS info (device loop0): balance: start -s [ 103.319413][ T5616] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5615] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5615] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5615] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5615] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5633 attached [pid 5633] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5633] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... clone resumed>, parent_tid=[97], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 97 [pid 5615] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = 0 [pid 5633] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5633] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5633] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] <... futex resumed>) = 1 [pid 5615] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... futex resumed>) = 0 [pid 5615] <... futex resumed>) = 1 [pid 5633] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 103.352378][ T5616] BTRFS info (device loop0): balance: ended with status: 0 [pid 5615] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5633] <... ioctl resumed>) = 0 [pid 5633] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5616] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5633] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] <... futex resumed>) = 0 [pid 5616] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] close(3) = 0 [pid 5615] close(4) = 0 [pid 5615] close(5) = 0 [pid 5615] close(6) = -1 EBADF (Bad file descriptor) [pid 5615] close(7) = -1 EBADF (Bad file descriptor) [pid 5615] close(8) = -1 EBADF (Bad file descriptor) [pid 5615] close(9) = -1 EBADF (Bad file descriptor) [pid 5615] close(10) = -1 EBADF (Bad file descriptor) [pid 5615] close(11) = -1 EBADF (Bad file descriptor) [pid 5615] close(12) = -1 EBADF (Bad file descriptor) [pid 5615] close(13) = -1 EBADF (Bad file descriptor) [pid 5615] close(14) = -1 EBADF (Bad file descriptor) [pid 5615] close(15) = -1 EBADF (Bad file descriptor) [pid 5615] close(16) = -1 EBADF (Bad file descriptor) [pid 5615] close(17) = -1 EBADF (Bad file descriptor) [pid 5615] close(18) = -1 EBADF (Bad file descriptor) [pid 5615] close(19) = -1 EBADF (Bad file descriptor) [pid 5615] close(20) = -1 EBADF (Bad file descriptor) [pid 5615] close(21) = -1 EBADF (Bad file descriptor) [pid 5615] close(22) = -1 EBADF (Bad file descriptor) [pid 5615] close(23) = -1 EBADF (Bad file descriptor) [pid 5615] close(24) = -1 EBADF (Bad file descriptor) [pid 5615] close(25) = -1 EBADF (Bad file descriptor) [pid 5615] close(26) = -1 EBADF (Bad file descriptor) [pid 5615] close(27) = -1 EBADF (Bad file descriptor) [pid 5615] close(28) = -1 EBADF (Bad file descriptor) [pid 5615] close(29) = -1 EBADF (Bad file descriptor) [pid 5615] exit_group(0 [pid 5633] <... futex resumed>) = ? [pid 5616] <... futex resumed>) = ? [pid 5615] <... exit_group resumed>) = ? [pid 5633] +++ exited with 0 +++ [pid 5616] +++ exited with 0 +++ [pid 5615] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./31/cgroup.cpu") = 0 [pid 5007] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./31/binderfs") = 0 [pid 5007] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./31/file0") = 0 [pid 5007] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./31/cgroup") = 0 [pid 5007] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./31/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./31") = 0 [pid 5007] mkdir("./32", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 98 ./strace-static-x86_64: Process 5634 attached [pid 5634] set_robust_list(0x5555571235e0, 24) = 0 [pid 5634] chdir("./32") = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5634] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5634] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5634] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5634] write(3, "1000", 4) = 4 [pid 5634] close(3) = 0 [pid 5634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5634] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5634] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5635 attached [pid 5635] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5634] <... clone resumed>, parent_tid=[99], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 99 [pid 5634] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5635] memfd_create("syzkaller", 0) = 3 [pid 5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5635] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5635] close(3) = 0 [pid 5635] mkdir("./file0", 0777) = 0 [ 103.868145][ T5635] loop0: detected capacity change from 0 to 32768 [ 103.879293][ T5635] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5635) [ 103.896723][ T5635] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.905526][ T5635] BTRFS info (device loop0): using free space tree [pid 5635] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5635] chdir("./file0") = 0 [pid 5635] ioctl(4, LOOP_CLR_FD) = 0 [pid 5635] close(4) = 0 [pid 5635] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5635] <... futex resumed>) = 0 [pid 5634] <... futex resumed>) = 1 [pid 5635] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5635] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] <... futex resumed>) = 0 [pid 5635] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 103.924122][ T5635] BTRFS info (device loop0): enabling ssd optimizations [ 103.931314][ T5635] BTRFS info (device loop0): auto enabling async discard [ 103.977172][ T5635] BTRFS info (device loop0): balance: start -s [ 103.986720][ T5635] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5634] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5634] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5634] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5634] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[100], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 100 ./strace-static-x86_64: Process 5652 attached [pid 5652] set_robust_list(0x7fd089ba69e0, 24 [pid 5634] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] <... set_robust_list resumed>) = 0 [pid 5634] <... futex resumed>) = 0 [pid 5652] openat(AT_FDCWD, ".", O_RDONLY [pid 5634] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... openat resumed>) = 5 [pid 5652] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5634] <... futex resumed>) = 0 [pid 5634] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5635] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5635] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 104.019338][ T5635] BTRFS info (device loop0): balance: ended with status: 0 [pid 5635] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5652] <... ioctl resumed>) = 0 [pid 5652] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5634] close(3 [pid 5652] <... futex resumed>) = 0 [pid 5652] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5634] <... close resumed>) = 0 [pid 5634] close(4) = 0 [pid 5634] close(5) = 0 [pid 5634] close(6) = -1 EBADF (Bad file descriptor) [pid 5634] close(7) = -1 EBADF (Bad file descriptor) [pid 5634] close(8) = -1 EBADF (Bad file descriptor) [pid 5634] close(9) = -1 EBADF (Bad file descriptor) [pid 5634] close(10) = -1 EBADF (Bad file descriptor) [pid 5634] close(11) = -1 EBADF (Bad file descriptor) [pid 5634] close(12) = -1 EBADF (Bad file descriptor) [pid 5634] close(13) = -1 EBADF (Bad file descriptor) [pid 5634] close(14) = -1 EBADF (Bad file descriptor) [pid 5634] close(15) = -1 EBADF (Bad file descriptor) [pid 5634] close(16) = -1 EBADF (Bad file descriptor) [pid 5634] close(17) = -1 EBADF (Bad file descriptor) [pid 5634] close(18) = -1 EBADF (Bad file descriptor) [pid 5634] close(19) = -1 EBADF (Bad file descriptor) [pid 5634] close(20) = -1 EBADF (Bad file descriptor) [pid 5634] close(21) = -1 EBADF (Bad file descriptor) [pid 5634] close(22) = -1 EBADF (Bad file descriptor) [pid 5634] close(23) = -1 EBADF (Bad file descriptor) [pid 5634] close(24) = -1 EBADF (Bad file descriptor) [pid 5634] close(25) = -1 EBADF (Bad file descriptor) [pid 5634] close(26) = -1 EBADF (Bad file descriptor) [pid 5634] close(27) = -1 EBADF (Bad file descriptor) [pid 5634] close(28) = -1 EBADF (Bad file descriptor) [pid 5634] close(29) = -1 EBADF (Bad file descriptor) [pid 5634] exit_group(0 [pid 5652] <... futex resumed>) = ? [pid 5635] <... futex resumed>) = ? [pid 5634] <... exit_group resumed>) = ? [pid 5652] +++ exited with 0 +++ [pid 5635] +++ exited with 0 +++ [pid 5634] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./32/cgroup.cpu") = 0 [pid 5007] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./32/binderfs") = 0 [pid 5007] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./32/file0") = 0 [pid 5007] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./32/cgroup") = 0 [pid 5007] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./32/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./32/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./32") = 0 [pid 5007] mkdir("./33", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5655 attached [pid 5655] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 101 [pid 5655] <... set_robust_list resumed>) = 0 [pid 5655] chdir("./33") = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5655] setpgid(0, 0) = 0 [pid 5655] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5655] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5655] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5655] write(3, "1000", 4) = 4 [pid 5655] close(3) = 0 [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5655] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5655] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5656] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] <... clone resumed>, parent_tid=[102], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 102 [pid 5655] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5656] memfd_create("syzkaller", 0) = 3 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5656] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5656] close(3) = 0 [pid 5656] mkdir("./file0", 0777) = 0 [ 104.572465][ T5656] loop0: detected capacity change from 0 to 32768 [ 104.593551][ T5656] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5656) [ 104.609073][ T5656] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [pid 5656] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5656] chdir("./file0") = 0 [pid 5656] ioctl(4, LOOP_CLR_FD) = 0 [pid 5656] close(4) = 0 [pid 5656] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] <... futex resumed>) = 0 [pid 5655] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5655] <... futex resumed>) = 1 [pid 5656] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5656] <... openat resumed>) = 4 [pid 5656] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5655] <... futex resumed>) = 0 [pid 5655] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5655] <... futex resumed>) = 0 [ 104.617949][ T5656] BTRFS info (device loop0): using free space tree [ 104.639033][ T5656] BTRFS info (device loop0): enabling ssd optimizations [ 104.646254][ T5656] BTRFS info (device loop0): auto enabling async discard [pid 5655] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5655] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5655] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5655] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5673 attached [pid 5673] set_robust_list(0x7fd089ba69e0, 24 [pid 5655] <... clone resumed>, parent_tid=[103], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 103 [pid 5655] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... set_robust_list resumed>) = 0 [pid 5673] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5673] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 104.686767][ T5656] BTRFS info (device loop0): balance: start -s [ 104.695131][ T5656] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5655] <... futex resumed>) = 0 [pid 5673] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5673] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5655] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 104.746504][ T5656] BTRFS info (device loop0): balance: ended with status: 0 [pid 5656] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5656] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5673] <... ioctl resumed>) = 0 [pid 5673] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5673] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5655] close(3) = 0 [pid 5655] close(4) = 0 [pid 5655] close(5) = 0 [pid 5655] close(6) = -1 EBADF (Bad file descriptor) [pid 5655] close(7) = -1 EBADF (Bad file descriptor) [pid 5655] close(8) = -1 EBADF (Bad file descriptor) [pid 5655] close(9) = -1 EBADF (Bad file descriptor) [pid 5655] close(10) = -1 EBADF (Bad file descriptor) [pid 5655] close(11) = -1 EBADF (Bad file descriptor) [pid 5655] close(12) = -1 EBADF (Bad file descriptor) [pid 5655] close(13) = -1 EBADF (Bad file descriptor) [pid 5655] close(14) = -1 EBADF (Bad file descriptor) [pid 5655] close(15) = -1 EBADF (Bad file descriptor) [pid 5655] close(16) = -1 EBADF (Bad file descriptor) [pid 5655] close(17) = -1 EBADF (Bad file descriptor) [pid 5655] close(18) = -1 EBADF (Bad file descriptor) [pid 5655] close(19) = -1 EBADF (Bad file descriptor) [pid 5655] close(20) = -1 EBADF (Bad file descriptor) [pid 5655] close(21) = -1 EBADF (Bad file descriptor) [pid 5655] close(22) = -1 EBADF (Bad file descriptor) [pid 5655] close(23) = -1 EBADF (Bad file descriptor) [pid 5655] close(24) = -1 EBADF (Bad file descriptor) [pid 5655] close(25) = -1 EBADF (Bad file descriptor) [pid 5655] close(26) = -1 EBADF (Bad file descriptor) [pid 5655] close(27) = -1 EBADF (Bad file descriptor) [pid 5655] close(28) = -1 EBADF (Bad file descriptor) [pid 5655] close(29) = -1 EBADF (Bad file descriptor) [pid 5655] exit_group(0 [pid 5673] <... futex resumed>) = ? [pid 5656] <... futex resumed>) = ? [pid 5655] <... exit_group resumed>) = ? [pid 5673] +++ exited with 0 +++ [pid 5656] +++ exited with 0 +++ [pid 5655] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./33/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./33/cgroup.cpu") = 0 [pid 5007] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./33/binderfs") = 0 [pid 5007] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./33/file0") = 0 [pid 5007] umount2("./33/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./33/cgroup") = 0 [pid 5007] umount2("./33/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./33/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./33") = 0 [pid 5007] mkdir("./34", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5674 attached [pid 5674] set_robust_list(0x5555571235e0, 24) = 0 [pid 5674] chdir("./34") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 104 [pid 5674] <... symlink resumed>) = 0 [pid 5674] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5674] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5674] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5675 attached , parent_tid=[105], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 105 [pid 5675] set_robust_list(0x7fd090fc79e0, 24 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... set_robust_list resumed>) = 0 [pid 5674] <... futex resumed>) = 0 [pid 5675] memfd_create("syzkaller", 0 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5675] <... memfd_create resumed>) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5675] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5675] close(3) = 0 [pid 5675] mkdir("./file0", 0777) = 0 [ 105.264817][ T5675] loop0: detected capacity change from 0 to 32768 [ 105.276216][ T5675] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5675) [ 105.292660][ T5675] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.301864][ T5675] BTRFS info (device loop0): using free space tree [pid 5675] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file0") = 0 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5674] <... futex resumed>) = 0 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5674] <... futex resumed>) = 0 [pid 5675] <... openat resumed>) = 4 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5674] <... futex resumed>) = 0 [ 105.320842][ T5675] BTRFS info (device loop0): enabling ssd optimizations [ 105.328257][ T5675] BTRFS info (device loop0): auto enabling async discard [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5674] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5674] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[106], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 106 [pid 5674] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5692 attached [pid 5692] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5692] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5675] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5692] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... futex resumed>) = 1 [pid 5674] <... futex resumed>) = 0 [pid 5692] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] <... futex resumed>) = 0 [pid 5674] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5674] <... futex resumed>) = 0 [ 105.363458][ T5675] BTRFS info (device loop0): balance: start -s [ 105.371727][ T5675] BTRFS info (device loop0): relocating block group 1048576 flags system [ 105.399056][ T5675] BTRFS info (device loop0): balance: ended with status: 0 [pid 5674] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5675] <... ioctl resumed>) = 0 [pid 5675] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] close(3 [pid 5675] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5674] <... close resumed>) = 0 [pid 5674] close(4) = 0 [pid 5674] close(5) = 0 [pid 5674] close(6) = -1 EBADF (Bad file descriptor) [pid 5674] close(7) = -1 EBADF (Bad file descriptor) [pid 5674] close(8) = -1 EBADF (Bad file descriptor) [pid 5674] close(9) = -1 EBADF (Bad file descriptor) [pid 5674] close(10) = -1 EBADF (Bad file descriptor) [pid 5674] close(11) = -1 EBADF (Bad file descriptor) [pid 5674] close(12) = -1 EBADF (Bad file descriptor) [pid 5674] close(13) = -1 EBADF (Bad file descriptor) [pid 5674] close(14) = -1 EBADF (Bad file descriptor) [pid 5674] close(15) = -1 EBADF (Bad file descriptor) [pid 5674] close(16) = -1 EBADF (Bad file descriptor) [pid 5674] close(17) = -1 EBADF (Bad file descriptor) [pid 5674] close(18) = -1 EBADF (Bad file descriptor) [pid 5674] close(19) = -1 EBADF (Bad file descriptor) [pid 5674] close(20) = -1 EBADF (Bad file descriptor) [pid 5674] close(21) = -1 EBADF (Bad file descriptor) [pid 5674] close(22) = -1 EBADF (Bad file descriptor) [pid 5674] close(23) = -1 EBADF (Bad file descriptor) [pid 5674] close(24) = -1 EBADF (Bad file descriptor) [pid 5674] close(25) = -1 EBADF (Bad file descriptor) [pid 5674] close(26) = -1 EBADF (Bad file descriptor) [pid 5674] close(27) = -1 EBADF (Bad file descriptor) [pid 5674] close(28) = -1 EBADF (Bad file descriptor) [pid 5674] close(29) = -1 EBADF (Bad file descriptor) [pid 5674] exit_group(0 [pid 5692] <... futex resumed>) = ? [pid 5675] <... futex resumed>) = ? [pid 5674] <... exit_group resumed>) = ? [pid 5692] +++ exited with 0 +++ [pid 5675] +++ exited with 0 +++ [pid 5674] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5007] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./34/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./34/cgroup.cpu") = 0 [pid 5007] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./34/binderfs") = 0 [pid 5007] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./34/file0") = 0 [pid 5007] umount2("./34/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./34/cgroup") = 0 [pid 5007] umount2("./34/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./34/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./34/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./34") = 0 [pid 5007] mkdir("./35", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 107 ./strace-static-x86_64: Process 5693 attached [pid 5693] set_robust_list(0x5555571235e0, 24) = 0 [pid 5693] chdir("./35") = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5693] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5693] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3) = 0 [pid 5693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5693] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[108], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 108 [pid 5693] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5694 attached [pid 5694] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5694] memfd_create("syzkaller", 0) = 3 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5694] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5694] close(3) = 0 [pid 5694] mkdir("./file0", 0777) = 0 [ 105.917957][ T5694] loop0: detected capacity change from 0 to 32768 [ 105.929099][ T5694] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5694) [ 105.947201][ T5694] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.956025][ T5694] BTRFS info (device loop0): using free space tree [pid 5694] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file0") = 0 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5694] close(4) = 0 [pid 5694] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5694] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5693] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... openat resumed>) = 4 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... futex resumed>) = 1 [ 105.977749][ T5694] BTRFS info (device loop0): enabling ssd optimizations [ 105.984756][ T5694] BTRFS info (device loop0): auto enabling async discard [pid 5694] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5693] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5693] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5693] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5711 attached , parent_tid=[109], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 109 [pid 5711] set_robust_list(0x7fd089ba69e0, 24 [pid 5693] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5711] <... set_robust_list resumed>) = 0 [pid 5711] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5711] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] <... futex resumed>) = 0 [pid 5693] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 106.026931][ T5694] BTRFS info (device loop0): balance: start -s [ 106.036268][ T5694] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5711] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5711] <... ioctl resumed>) = 0 [pid 5711] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5711] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5694] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] close(3 [pid 5694] <... futex resumed>) = 0 [pid 5694] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] <... close resumed>) = 0 [pid 5693] close(4) = 0 [pid 5693] close(5) = 0 [pid 5693] close(6) = -1 EBADF (Bad file descriptor) [pid 5693] close(7) = -1 EBADF (Bad file descriptor) [pid 5693] close(8) = -1 EBADF (Bad file descriptor) [pid 5693] close(9) = -1 EBADF (Bad file descriptor) [pid 5693] close(10) = -1 EBADF (Bad file descriptor) [pid 5693] close(11) = -1 EBADF (Bad file descriptor) [pid 5693] close(12) = -1 EBADF (Bad file descriptor) [pid 5693] close(13) = -1 EBADF (Bad file descriptor) [pid 5693] close(14) = -1 EBADF (Bad file descriptor) [pid 5693] close(15) = -1 EBADF (Bad file descriptor) [pid 5693] close(16) = -1 EBADF (Bad file descriptor) [pid 5693] close(17) = -1 EBADF (Bad file descriptor) [pid 5693] close(18) = -1 EBADF (Bad file descriptor) [pid 5693] close(19) = -1 EBADF (Bad file descriptor) [pid 5693] close(20) = -1 EBADF (Bad file descriptor) [pid 5693] close(21) = -1 EBADF (Bad file descriptor) [pid 5693] close(22) = -1 EBADF (Bad file descriptor) [pid 5693] close(23) = -1 EBADF (Bad file descriptor) [pid 5693] close(24) = -1 EBADF (Bad file descriptor) [pid 5693] close(25) = -1 EBADF (Bad file descriptor) [pid 5693] close(26) = -1 EBADF (Bad file descriptor) [pid 5693] close(27) = -1 EBADF (Bad file descriptor) [pid 5693] close(28) = -1 EBADF (Bad file descriptor) [pid 5693] close(29) = -1 EBADF (Bad file descriptor) [pid 5693] exit_group(0) = ? [pid 5711] <... futex resumed>) = ? [pid 5711] +++ exited with 0 +++ [pid 5694] <... futex resumed>) = ? [pid 5694] +++ exited with 0 +++ [pid 5693] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./35/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./35/cgroup.cpu") = 0 [pid 5007] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./35/binderfs") = 0 [ 106.178557][ T5694] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./35/file0") = 0 [pid 5007] umount2("./35/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./35/cgroup") = 0 [pid 5007] umount2("./35/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./35/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./35/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./35") = 0 [pid 5007] mkdir("./36", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 110 ./strace-static-x86_64: Process 5712 attached [pid 5712] set_robust_list(0x5555571235e0, 24) = 0 [pid 5712] chdir("./36") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5712] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5712] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5712] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[111], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 111 [pid 5712] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5713] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [pid 5713] mkdir("./file0", 0777) = 0 [ 106.581206][ T5713] loop0: detected capacity change from 0 to 32768 [ 106.595707][ T5713] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5713) [ 106.613027][ T5713] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 106.621900][ T5713] BTRFS info (device loop0): using free space tree [pid 5713] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5713] chdir("./file0") = 0 [pid 5713] ioctl(4, LOOP_CLR_FD) = 0 [pid 5713] close(4) = 0 [pid 5713] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... futex resumed>) = 0 [pid 5713] <... futex resumed>) = 1 [pid 5713] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5712] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5713] <... openat resumed>) = 4 [pid 5713] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5713] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... futex resumed>) = 0 [pid 5712] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... futex resumed>) = 0 [pid 5712] <... futex resumed>) = 1 [pid 5713] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 106.643299][ T5713] BTRFS info (device loop0): enabling ssd optimizations [ 106.650499][ T5713] BTRFS info (device loop0): auto enabling async discard [pid 5712] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5712] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5712] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[112], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 112 [pid 5712] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.706576][ T5713] BTRFS info (device loop0): balance: start -s [ 106.714784][ T5713] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5712] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5730 attached [pid 5730] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5730] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5730] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5730] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] <... futex resumed>) = 0 [pid 5730] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 106.750484][ T5713] BTRFS info (device loop0): balance: ended with status: 0 [pid 5712] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5713] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5713] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5730] <... ioctl resumed>) = 0 [pid 5730] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] close(3) = 0 [pid 5730] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] close(4) = 0 [pid 5712] close(5) = 0 [pid 5712] close(6) = -1 EBADF (Bad file descriptor) [pid 5712] close(7) = -1 EBADF (Bad file descriptor) [pid 5712] close(8) = -1 EBADF (Bad file descriptor) [pid 5712] close(9) = -1 EBADF (Bad file descriptor) [pid 5712] close(10) = -1 EBADF (Bad file descriptor) [pid 5712] close(11) = -1 EBADF (Bad file descriptor) [pid 5712] close(12) = -1 EBADF (Bad file descriptor) [pid 5712] close(13) = -1 EBADF (Bad file descriptor) [pid 5712] close(14) = -1 EBADF (Bad file descriptor) [pid 5712] close(15) = -1 EBADF (Bad file descriptor) [pid 5712] close(16) = -1 EBADF (Bad file descriptor) [pid 5712] close(17) = -1 EBADF (Bad file descriptor) [pid 5712] close(18) = -1 EBADF (Bad file descriptor) [pid 5712] close(19) = -1 EBADF (Bad file descriptor) [pid 5712] close(20) = -1 EBADF (Bad file descriptor) [pid 5712] close(21) = -1 EBADF (Bad file descriptor) [pid 5712] close(22) = -1 EBADF (Bad file descriptor) [pid 5712] close(23) = -1 EBADF (Bad file descriptor) [pid 5712] close(24) = -1 EBADF (Bad file descriptor) [pid 5712] close(25) = -1 EBADF (Bad file descriptor) [pid 5712] close(26) = -1 EBADF (Bad file descriptor) [pid 5712] close(27) = -1 EBADF (Bad file descriptor) [pid 5712] close(28) = -1 EBADF (Bad file descriptor) [pid 5712] close(29) = -1 EBADF (Bad file descriptor) [pid 5712] exit_group(0 [pid 5730] <... futex resumed>) = ? [pid 5713] <... futex resumed>) = ? [pid 5730] +++ exited with 0 +++ [pid 5713] +++ exited with 0 +++ [pid 5712] <... exit_group resumed>) = ? [pid 5712] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./36/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./36/cgroup.cpu") = 0 [pid 5007] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./36/binderfs") = 0 [pid 5007] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./36/file0") = 0 [pid 5007] umount2("./36/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./36/cgroup") = 0 [pid 5007] umount2("./36/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./36/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./36/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./36") = 0 [pid 5007] mkdir("./37", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 113 ./strace-static-x86_64: Process 5731 attached [pid 5731] set_robust_list(0x5555571235e0, 24) = 0 [pid 5731] chdir("./37") = 0 [pid 5731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5731] setpgid(0, 0) = 0 [pid 5731] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5731] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5731] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5731] write(3, "1000", 4) = 4 [pid 5731] close(3) = 0 [pid 5731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5731] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5731] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5732 attached , parent_tid=[114], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 114 [pid 5732] set_robust_list(0x7fd090fc79e0, 24 [pid 5731] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] <... set_robust_list resumed>) = 0 [pid 5731] <... futex resumed>) = 0 [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5732] memfd_create("syzkaller", 0) = 3 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5732] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5732] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5732] close(3) = 0 [pid 5732] mkdir("./file0", 0777) = 0 [ 107.256720][ T5732] loop0: detected capacity change from 0 to 32768 [ 107.268407][ T5732] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5732) [ 107.285489][ T5732] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.294217][ T5732] BTRFS info (device loop0): using free space tree [pid 5732] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5732] chdir("./file0") = 0 [pid 5732] ioctl(4, LOOP_CLR_FD) = 0 [pid 5732] close(4) = 0 [pid 5732] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5732] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5731] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] <... openat resumed>) = 4 [pid 5731] <... futex resumed>) = 0 [pid 5732] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5732] <... futex resumed>) = 0 [pid 5731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5732] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5731] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 107.313927][ T5732] BTRFS info (device loop0): enabling ssd optimizations [ 107.321085][ T5732] BTRFS info (device loop0): auto enabling async discard [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5731] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5731] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5749 attached , parent_tid=[115], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 115 [pid 5749] set_robust_list(0x7fd089ba69e0, 24 [pid 5731] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] <... set_robust_list resumed>) = 0 [pid 5749] openat(AT_FDCWD, ".", O_RDONLY [pid 5731] <... futex resumed>) = 0 [pid 5749] <... openat resumed>) = 5 [pid 5731] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5731] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.373391][ T5732] BTRFS info (device loop0): balance: start -s [ 107.383505][ T5732] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5749] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 107.453322][ T5732] BTRFS info (device loop0): balance: ended with status: 0 [pid 5749] <... ioctl resumed>) = 0 [pid 5749] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5749] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5732] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5732] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] close(3 [pid 5732] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5731] <... close resumed>) = 0 [pid 5731] close(4) = 0 [pid 5731] close(5) = 0 [pid 5731] close(6) = -1 EBADF (Bad file descriptor) [pid 5731] close(7) = -1 EBADF (Bad file descriptor) [pid 5731] close(8) = -1 EBADF (Bad file descriptor) [pid 5731] close(9) = -1 EBADF (Bad file descriptor) [pid 5731] close(10) = -1 EBADF (Bad file descriptor) [pid 5731] close(11) = -1 EBADF (Bad file descriptor) [pid 5731] close(12) = -1 EBADF (Bad file descriptor) [pid 5731] close(13) = -1 EBADF (Bad file descriptor) [pid 5731] close(14) = -1 EBADF (Bad file descriptor) [pid 5731] close(15) = -1 EBADF (Bad file descriptor) [pid 5731] close(16) = -1 EBADF (Bad file descriptor) [pid 5731] close(17) = -1 EBADF (Bad file descriptor) [pid 5731] close(18) = -1 EBADF (Bad file descriptor) [pid 5731] close(19) = -1 EBADF (Bad file descriptor) [pid 5731] close(20) = -1 EBADF (Bad file descriptor) [pid 5731] close(21) = -1 EBADF (Bad file descriptor) [pid 5731] close(22) = -1 EBADF (Bad file descriptor) [pid 5731] close(23) = -1 EBADF (Bad file descriptor) [pid 5731] close(24) = -1 EBADF (Bad file descriptor) [pid 5731] close(25) = -1 EBADF (Bad file descriptor) [pid 5731] close(26) = -1 EBADF (Bad file descriptor) [pid 5731] close(27) = -1 EBADF (Bad file descriptor) [pid 5731] close(28) = -1 EBADF (Bad file descriptor) [pid 5731] close(29) = -1 EBADF (Bad file descriptor) [pid 5731] exit_group(0 [pid 5749] <... futex resumed>) = ? [pid 5732] <... futex resumed>) = ? [pid 5731] <... exit_group resumed>) = ? [pid 5749] +++ exited with 0 +++ [pid 5732] +++ exited with 0 +++ [pid 5731] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./37/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./37/cgroup.cpu") = 0 [pid 5007] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./37/binderfs") = 0 [pid 5007] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./37/file0") = 0 [pid 5007] umount2("./37/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./37/cgroup") = 0 [pid 5007] umount2("./37/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./37/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./37/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./37") = 0 [pid 5007] mkdir("./38", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 116 ./strace-static-x86_64: Process 5750 attached [pid 5750] set_robust_list(0x5555571235e0, 24) = 0 [pid 5750] chdir("./38") = 0 [pid 5750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5750] setpgid(0, 0) = 0 [pid 5750] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5750] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5750] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5750] write(3, "1000", 4) = 4 [pid 5750] close(3) = 0 [pid 5750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5750] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5750] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5751 attached [pid 5751] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5751] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] <... clone resumed>, parent_tid=[117], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 117 [pid 5750] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] <... futex resumed>) = 0 [pid 5750] <... futex resumed>) = 1 [pid 5751] memfd_create("syzkaller", 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5751] <... memfd_create resumed>) = 3 [pid 5751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5751] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5751] close(3) = 0 [pid 5751] mkdir("./file0", 0777) = 0 [ 107.941349][ T5751] loop0: detected capacity change from 0 to 32768 [ 107.952491][ T5751] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5751) [ 107.969411][ T5751] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.978276][ T5751] BTRFS info (device loop0): using free space tree [pid 5751] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5751] chdir("./file0") = 0 [pid 5751] ioctl(4, LOOP_CLR_FD) = 0 [pid 5751] close(4) = 0 [pid 5751] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5751] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.998801][ T5751] BTRFS info (device loop0): enabling ssd optimizations [ 108.006025][ T5751] BTRFS info (device loop0): auto enabling async discard [pid 5751] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5750] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5750] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5750] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[118], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 118 [pid 5750] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5768 attached [pid 5750] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5768] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5768] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5768] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5768] <... futex resumed>) = 1 [ 108.052405][ T5751] BTRFS info (device loop0): balance: start -s [ 108.062317][ T5751] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5768] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5751] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5751] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.115812][ T5751] BTRFS info (device loop0): balance: ended with status: 0 [pid 5751] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] <... ioctl resumed>) = 0 [pid 5768] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] close(3) = 0 [pid 5750] close(4) = 0 [pid 5750] close(5) = 0 [pid 5750] close(6) = -1 EBADF (Bad file descriptor) [pid 5750] close(7) = -1 EBADF (Bad file descriptor) [pid 5750] close(8) = -1 EBADF (Bad file descriptor) [pid 5750] close(9) = -1 EBADF (Bad file descriptor) [pid 5750] close(10) = -1 EBADF (Bad file descriptor) [pid 5750] close(11) = -1 EBADF (Bad file descriptor) [pid 5750] close(12) = -1 EBADF (Bad file descriptor) [pid 5750] close(13) = -1 EBADF (Bad file descriptor) [pid 5750] close(14) = -1 EBADF (Bad file descriptor) [pid 5750] close(15) = -1 EBADF (Bad file descriptor) [pid 5750] close(16) = -1 EBADF (Bad file descriptor) [pid 5750] close(17) = -1 EBADF (Bad file descriptor) [pid 5750] close(18) = -1 EBADF (Bad file descriptor) [pid 5750] close(19) = -1 EBADF (Bad file descriptor) [pid 5750] close(20) = -1 EBADF (Bad file descriptor) [pid 5750] close(21) = -1 EBADF (Bad file descriptor) [pid 5750] close(22) = -1 EBADF (Bad file descriptor) [pid 5750] close(23) = -1 EBADF (Bad file descriptor) [pid 5750] close(24) = -1 EBADF (Bad file descriptor) [pid 5750] close(25) = -1 EBADF (Bad file descriptor) [pid 5750] close(26) = -1 EBADF (Bad file descriptor) [pid 5750] close(27) = -1 EBADF (Bad file descriptor) [pid 5750] close(28) = -1 EBADF (Bad file descriptor) [pid 5750] close(29) = -1 EBADF (Bad file descriptor) [pid 5750] exit_group(0 [pid 5751] <... futex resumed>) = ? [pid 5768] <... futex resumed>) = ? [pid 5750] <... exit_group resumed>) = ? [pid 5751] +++ exited with 0 +++ [pid 5768] +++ exited with 0 +++ [pid 5750] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./38/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./38/cgroup.cpu") = 0 [pid 5007] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./38/binderfs") = 0 [pid 5007] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./38/file0") = 0 [pid 5007] umount2("./38/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./38/cgroup") = 0 [pid 5007] umount2("./38/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./38/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./38/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./38") = 0 [pid 5007] mkdir("./39", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 119 ./strace-static-x86_64: Process 5769 attached [pid 5769] set_robust_list(0x5555571235e0, 24) = 0 [pid 5769] chdir("./39") = 0 [pid 5769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5769] setpgid(0, 0) = 0 [pid 5769] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5769] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5769] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5769] write(3, "1000", 4) = 4 [pid 5769] close(3) = 0 [pid 5769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5769] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5769] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5770 attached , parent_tid=[120], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 120 [pid 5770] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5770] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5770] <... futex resumed>) = 0 [pid 5770] memfd_create("syzkaller", 0 [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5770] <... memfd_create resumed>) = 3 [pid 5770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5770] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5770] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5770] close(3) = 0 [pid 5770] mkdir("./file0", 0777) = 0 [ 108.622408][ T5770] loop0: detected capacity change from 0 to 32768 [ 108.633973][ T5770] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5770) [ 108.649568][ T5770] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.658540][ T5770] BTRFS info (device loop0): using free space tree [pid 5770] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5770] chdir("./file0") = 0 [pid 5770] ioctl(4, LOOP_CLR_FD) = 0 [pid 5770] close(4) = 0 [pid 5770] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5769] <... futex resumed>) = 0 [pid 5769] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5769] <... futex resumed>) = 0 [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5770] <... openat resumed>) = 4 [pid 5770] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5769] <... futex resumed>) = 0 [pid 5770] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5769] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.679169][ T5770] BTRFS info (device loop0): enabling ssd optimizations [ 108.686542][ T5770] BTRFS info (device loop0): auto enabling async discard [pid 5769] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5769] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5769] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5769] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5787 attached [pid 5787] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5787] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] <... clone resumed>, parent_tid=[121], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 121 [pid 5769] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... futex resumed>) = 0 [pid 5769] <... futex resumed>) = 1 [pid 5787] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5787] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5769] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... futex resumed>) = 0 [pid 5769] <... futex resumed>) = 1 [pid 5787] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 108.742885][ T5770] BTRFS info (device loop0): balance: start -s [ 108.751722][ T5770] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5769] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 108.824418][ T5770] BTRFS info (device loop0): balance: ended with status: 0 [pid 5787] <... ioctl resumed>) = 0 [pid 5787] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5770] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5769] close(3 [pid 5770] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] <... close resumed>) = 0 [pid 5769] close(4) = 0 [pid 5769] close(5) = 0 [pid 5769] close(6) = -1 EBADF (Bad file descriptor) [pid 5769] close(7) = -1 EBADF (Bad file descriptor) [pid 5769] close(8) = -1 EBADF (Bad file descriptor) [pid 5769] close(9) = -1 EBADF (Bad file descriptor) [pid 5769] close(10) = -1 EBADF (Bad file descriptor) [pid 5769] close(11) = -1 EBADF (Bad file descriptor) [pid 5769] close(12) = -1 EBADF (Bad file descriptor) [pid 5769] close(13) = -1 EBADF (Bad file descriptor) [pid 5769] close(14) = -1 EBADF (Bad file descriptor) [pid 5769] close(15) = -1 EBADF (Bad file descriptor) [pid 5769] close(16) = -1 EBADF (Bad file descriptor) [pid 5769] close(17) = -1 EBADF (Bad file descriptor) [pid 5769] close(18) = -1 EBADF (Bad file descriptor) [pid 5769] close(19) = -1 EBADF (Bad file descriptor) [pid 5769] close(20) = -1 EBADF (Bad file descriptor) [pid 5769] close(21) = -1 EBADF (Bad file descriptor) [pid 5769] close(22) = -1 EBADF (Bad file descriptor) [pid 5769] close(23) = -1 EBADF (Bad file descriptor) [pid 5769] close(24) = -1 EBADF (Bad file descriptor) [pid 5769] close(25) = -1 EBADF (Bad file descriptor) [pid 5769] close(26) = -1 EBADF (Bad file descriptor) [pid 5769] close(27) = -1 EBADF (Bad file descriptor) [pid 5769] close(28) = -1 EBADF (Bad file descriptor) [pid 5769] close(29) = -1 EBADF (Bad file descriptor) [pid 5769] exit_group(0 [pid 5787] <... futex resumed>) = ? [pid 5770] <... futex resumed>) = ? [pid 5769] <... exit_group resumed>) = ? [pid 5787] +++ exited with 0 +++ [pid 5770] +++ exited with 0 +++ [pid 5769] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./39/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./39/cgroup.cpu") = 0 [pid 5007] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./39/binderfs") = 0 [pid 5007] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./39/file0") = 0 [pid 5007] umount2("./39/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./39/cgroup") = 0 [pid 5007] umount2("./39/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./39/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./39/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./39") = 0 [pid 5007] mkdir("./40", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5788 attached , child_tidptr=0x5555571235d0) = 122 [pid 5788] set_robust_list(0x5555571235e0, 24) = 0 [pid 5788] chdir("./40") = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5788] setpgid(0, 0) = 0 [pid 5788] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5788] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5788] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5788] write(3, "1000", 4) = 4 [pid 5788] close(3) = 0 [pid 5788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5788] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5789 attached , parent_tid=[123], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 123 [pid 5788] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5789] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5789] memfd_create("syzkaller", 0) = 3 [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5789] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5789] close(3) = 0 [pid 5789] mkdir("./file0", 0777) = 0 [ 109.318339][ T5789] loop0: detected capacity change from 0 to 32768 [ 109.329786][ T5789] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5789) [ 109.346396][ T5789] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.355287][ T5789] BTRFS info (device loop0): using free space tree [pid 5789] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5789] chdir("./file0") = 0 [pid 5789] ioctl(4, LOOP_CLR_FD) = 0 [pid 5789] close(4) = 0 [pid 5789] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] <... futex resumed>) = 0 [pid 5789] <... futex resumed>) = 1 [pid 5789] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5788] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... openat resumed>) = 4 [pid 5789] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = 0 [pid 5788] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5789] <... futex resumed>) = 0 [pid 5788] <... futex resumed>) = 1 [pid 5789] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 109.376135][ T5789] BTRFS info (device loop0): enabling ssd optimizations [ 109.383225][ T5789] BTRFS info (device loop0): auto enabling async discard [pid 5788] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5788] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5788] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[124], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 124 [ 109.431344][ T5789] BTRFS info (device loop0): balance: start -s [ 109.441308][ T5789] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5788] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5806 attached ) = 0 [pid 5806] set_robust_list(0x7fd089ba69e0, 24 [pid 5788] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... set_robust_list resumed>) = 0 [pid 5806] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5806] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5806] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5788] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5789] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.487656][ T5789] BTRFS info (device loop0): balance: ended with status: 0 [pid 5789] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5806] <... ioctl resumed>) = 0 [pid 5806] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5788] close(3 [pid 5806] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... close resumed>) = 0 [pid 5788] close(4) = 0 [pid 5788] close(5) = 0 [pid 5788] close(6) = -1 EBADF (Bad file descriptor) [pid 5788] close(7) = -1 EBADF (Bad file descriptor) [pid 5788] close(8) = -1 EBADF (Bad file descriptor) [pid 5788] close(9) = -1 EBADF (Bad file descriptor) [pid 5788] close(10) = -1 EBADF (Bad file descriptor) [pid 5788] close(11) = -1 EBADF (Bad file descriptor) [pid 5788] close(12) = -1 EBADF (Bad file descriptor) [pid 5788] close(13) = -1 EBADF (Bad file descriptor) [pid 5788] close(14) = -1 EBADF (Bad file descriptor) [pid 5788] close(15) = -1 EBADF (Bad file descriptor) [pid 5788] close(16) = -1 EBADF (Bad file descriptor) [pid 5788] close(17) = -1 EBADF (Bad file descriptor) [pid 5788] close(18) = -1 EBADF (Bad file descriptor) [pid 5788] close(19) = -1 EBADF (Bad file descriptor) [pid 5788] close(20) = -1 EBADF (Bad file descriptor) [pid 5788] close(21) = -1 EBADF (Bad file descriptor) [pid 5788] close(22) = -1 EBADF (Bad file descriptor) [pid 5788] close(23) = -1 EBADF (Bad file descriptor) [pid 5788] close(24) = -1 EBADF (Bad file descriptor) [pid 5788] close(25) = -1 EBADF (Bad file descriptor) [pid 5788] close(26) = -1 EBADF (Bad file descriptor) [pid 5788] close(27) = -1 EBADF (Bad file descriptor) [pid 5788] close(28) = -1 EBADF (Bad file descriptor) [pid 5788] close(29) = -1 EBADF (Bad file descriptor) [pid 5788] exit_group(0 [pid 5806] <... futex resumed>) = ? [pid 5789] <... futex resumed>) = ? [pid 5788] <... exit_group resumed>) = ? [pid 5806] +++ exited with 0 +++ [pid 5789] +++ exited with 0 +++ [pid 5788] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./40/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./40/cgroup.cpu") = 0 [pid 5007] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./40/binderfs") = 0 [pid 5007] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./40/file0") = 0 [pid 5007] umount2("./40/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./40/cgroup") = 0 [pid 5007] umount2("./40/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./40/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./40/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./40") = 0 [pid 5007] mkdir("./41", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5807 attached [pid 5807] set_robust_list(0x5555571235e0, 24) = 0 [pid 5807] chdir("./41") = 0 [pid 5807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5807] setpgid(0, 0) = 0 [pid 5807] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5807] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5807] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 125 [pid 5807] <... openat resumed>) = 3 [pid 5807] write(3, "1000", 4) = 4 [pid 5807] close(3) = 0 [pid 5807] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5807] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5807] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x7fd090fc79e0, 24 [pid 5807] <... clone resumed>, parent_tid=[126], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 126 [pid 5807] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5808] <... set_robust_list resumed>) = 0 [pid 5808] memfd_create("syzkaller", 0) = 3 [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5808] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5808] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5808] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5808] close(3) = 0 [pid 5808] mkdir("./file0", 0777) = 0 [ 109.985730][ T5808] loop0: detected capacity change from 0 to 32768 [ 109.996474][ T5808] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5808) [ 110.014939][ T5808] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.023866][ T5808] BTRFS info (device loop0): using free space tree [pid 5808] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5808] chdir("./file0") = 0 [pid 5808] ioctl(4, LOOP_CLR_FD) = 0 [pid 5808] close(4) = 0 [pid 5808] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5808] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [ 110.043371][ T5808] BTRFS info (device loop0): enabling ssd optimizations [ 110.050886][ T5808] BTRFS info (device loop0): auto enabling async discard [pid 5808] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5807] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5807] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[127], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 127 [pid 5807] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5825 attached [pid 5825] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5825] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5825] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5825] <... futex resumed>) = 1 [ 110.097775][ T5808] BTRFS info (device loop0): balance: start -s [ 110.106996][ T5808] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5825] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5807] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5808] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5808] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.175918][ T5808] BTRFS info (device loop0): balance: ended with status: 0 [pid 5808] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] <... ioctl resumed>) = 0 [pid 5825] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5807] close(3) = 0 [pid 5807] close(4) = 0 [pid 5807] close(5) = 0 [pid 5807] close(6) = -1 EBADF (Bad file descriptor) [pid 5807] close(7) = -1 EBADF (Bad file descriptor) [pid 5807] close(8) = -1 EBADF (Bad file descriptor) [pid 5807] close(9) = -1 EBADF (Bad file descriptor) [pid 5807] close(10) = -1 EBADF (Bad file descriptor) [pid 5807] close(11) = -1 EBADF (Bad file descriptor) [pid 5807] close(12) = -1 EBADF (Bad file descriptor) [pid 5807] close(13) = -1 EBADF (Bad file descriptor) [pid 5807] close(14) = -1 EBADF (Bad file descriptor) [pid 5807] close(15) = -1 EBADF (Bad file descriptor) [pid 5807] close(16) = -1 EBADF (Bad file descriptor) [pid 5807] close(17) = -1 EBADF (Bad file descriptor) [pid 5807] close(18) = -1 EBADF (Bad file descriptor) [pid 5807] close(19) = -1 EBADF (Bad file descriptor) [pid 5807] close(20) = -1 EBADF (Bad file descriptor) [pid 5807] close(21) = -1 EBADF (Bad file descriptor) [pid 5807] close(22) = -1 EBADF (Bad file descriptor) [pid 5807] close(23) = -1 EBADF (Bad file descriptor) [pid 5807] close(24) = -1 EBADF (Bad file descriptor) [pid 5807] close(25) = -1 EBADF (Bad file descriptor) [pid 5807] close(26) = -1 EBADF (Bad file descriptor) [pid 5807] close(27) = -1 EBADF (Bad file descriptor) [pid 5807] close(28) = -1 EBADF (Bad file descriptor) [pid 5807] close(29) = -1 EBADF (Bad file descriptor) [pid 5807] exit_group(0 [pid 5825] <... futex resumed>) = ? [pid 5808] <... futex resumed>) = ? [pid 5807] <... exit_group resumed>) = ? [pid 5825] +++ exited with 0 +++ [pid 5808] +++ exited with 0 +++ [pid 5807] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./41/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./41/cgroup.cpu") = 0 [pid 5007] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./41/binderfs") = 0 [pid 5007] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./41/file0") = 0 [pid 5007] umount2("./41/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./41/cgroup") = 0 [pid 5007] umount2("./41/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./41/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./41/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./41") = 0 [pid 5007] mkdir("./42", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 128 ./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x5555571235e0, 24) = 0 [pid 5826] chdir("./42") = 0 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5826] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5826] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 [pid 5826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5826] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5826] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... clone resumed>, parent_tid=[129], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 129 [pid 5826] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 1 [pid 5827] memfd_create("syzkaller", 0 [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5827] <... memfd_create resumed>) = 3 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5827] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] mkdir("./file0", 0777) = 0 [ 110.666112][ T5827] loop0: detected capacity change from 0 to 32768 [ 110.675732][ T5827] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5827) [ 110.692508][ T5827] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.701331][ T5827] BTRFS info (device loop0): using free space tree [pid 5827] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] chdir("./file0") = 0 [pid 5827] ioctl(4, LOOP_CLR_FD) = 0 [pid 5827] close(4) = 0 [pid 5827] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5827] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... openat resumed>) = 4 [pid 5827] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5827] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 110.722231][ T5827] BTRFS info (device loop0): enabling ssd optimizations [ 110.729514][ T5827] BTRFS info (device loop0): auto enabling async discard [ 110.776877][ T5827] BTRFS info (device loop0): balance: start -s [ 110.785558][ T5827] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5826] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5826] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5826] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5826] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5844 attached , parent_tid=[130], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 130 [pid 5826] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] set_robust_list(0x7fd089ba69e0, 24 [pid 5826] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] <... set_robust_list resumed>) = 0 [pid 5844] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5844] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5844] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5826] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5827] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 110.818052][ T5827] BTRFS info (device loop0): balance: ended with status: 0 [pid 5827] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5844] <... ioctl resumed>) = 0 [pid 5844] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] close(3) = 0 [pid 5826] close(4) = 0 [pid 5826] close(5) = 0 [pid 5826] close(6) = -1 EBADF (Bad file descriptor) [pid 5826] close(7) = -1 EBADF (Bad file descriptor) [pid 5826] close(8) = -1 EBADF (Bad file descriptor) [pid 5826] close(9) = -1 EBADF (Bad file descriptor) [pid 5826] close(10) = -1 EBADF (Bad file descriptor) [pid 5826] close(11) = -1 EBADF (Bad file descriptor) [pid 5826] close(12) = -1 EBADF (Bad file descriptor) [pid 5826] close(13) = -1 EBADF (Bad file descriptor) [pid 5826] close(14) = -1 EBADF (Bad file descriptor) [pid 5826] close(15) = -1 EBADF (Bad file descriptor) [pid 5826] close(16) = -1 EBADF (Bad file descriptor) [pid 5826] close(17) = -1 EBADF (Bad file descriptor) [pid 5826] close(18) = -1 EBADF (Bad file descriptor) [pid 5826] close(19) = -1 EBADF (Bad file descriptor) [pid 5826] close(20) = -1 EBADF (Bad file descriptor) [pid 5826] close(21) = -1 EBADF (Bad file descriptor) [pid 5826] close(22) = -1 EBADF (Bad file descriptor) [pid 5826] close(23) = -1 EBADF (Bad file descriptor) [pid 5826] close(24) = -1 EBADF (Bad file descriptor) [pid 5826] close(25) = -1 EBADF (Bad file descriptor) [pid 5826] close(26) = -1 EBADF (Bad file descriptor) [pid 5826] close(27) = -1 EBADF (Bad file descriptor) [pid 5826] close(28) = -1 EBADF (Bad file descriptor) [pid 5826] close(29) = -1 EBADF (Bad file descriptor) [pid 5826] exit_group(0 [pid 5844] <... futex resumed>) = ? [pid 5827] <... futex resumed>) = ? [pid 5826] <... exit_group resumed>) = ? [pid 5844] +++ exited with 0 +++ [pid 5827] +++ exited with 0 +++ [pid 5826] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./42/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./42/cgroup.cpu") = 0 [pid 5007] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./42/binderfs") = 0 [pid 5007] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./42/file0") = 0 [pid 5007] umount2("./42/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./42/cgroup") = 0 [pid 5007] umount2("./42/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./42/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./42/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./42") = 0 [pid 5007] mkdir("./43", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 131 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5846] chdir("./43") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5846] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5846] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5846] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5846] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5847 attached , parent_tid=[132], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 132 [pid 5846] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5847] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5847] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] close(3) = 0 [pid 5847] mkdir("./file0", 0777) = 0 [ 111.355659][ T5847] loop0: detected capacity change from 0 to 32768 [ 111.366972][ T5847] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5847) [ 111.383908][ T5847] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 111.392864][ T5847] BTRFS info (device loop0): using free space tree [pid 5847] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file0") = 0 [pid 5847] ioctl(4, LOOP_CLR_FD) = 0 [pid 5847] close(4) = 0 [pid 5847] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5847] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5846] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] <... openat resumed>) = 4 [pid 5847] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 111.414266][ T5847] BTRFS info (device loop0): enabling ssd optimizations [ 111.421454][ T5847] BTRFS info (device loop0): auto enabling async discard [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5846] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5846] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5864 attached , parent_tid=[133], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 133 [pid 5846] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] set_robust_list(0x7fd089ba69e0, 24 [pid 5846] <... futex resumed>) = 0 [pid 5864] <... set_robust_list resumed>) = 0 [ 111.484474][ T5847] BTRFS info (device loop0): balance: start -s [ 111.493647][ T5847] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5864] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5864] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5864] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... futex resumed>) = 0 [pid 5864] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5846] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5846] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 111.531226][ T5847] BTRFS info (device loop0): balance: ended with status: 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5864] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5864] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5847] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5847] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] close(5) = 0 [pid 5846] close(6) = -1 EBADF (Bad file descriptor) [pid 5846] close(7) = -1 EBADF (Bad file descriptor) [pid 5846] close(8) = -1 EBADF (Bad file descriptor) [pid 5846] close(9) = -1 EBADF (Bad file descriptor) [pid 5846] close(10) = -1 EBADF (Bad file descriptor) [pid 5846] close(11) = -1 EBADF (Bad file descriptor) [pid 5846] close(12) = -1 EBADF (Bad file descriptor) [pid 5846] close(13) = -1 EBADF (Bad file descriptor) [pid 5846] close(14) = -1 EBADF (Bad file descriptor) [pid 5846] close(15) = -1 EBADF (Bad file descriptor) [pid 5846] close(16) = -1 EBADF (Bad file descriptor) [pid 5846] close(17) = -1 EBADF (Bad file descriptor) [pid 5846] close(18) = -1 EBADF (Bad file descriptor) [pid 5846] close(19) = -1 EBADF (Bad file descriptor) [pid 5846] close(20) = -1 EBADF (Bad file descriptor) [pid 5846] close(21) = -1 EBADF (Bad file descriptor) [pid 5846] close(22) = -1 EBADF (Bad file descriptor) [pid 5846] close(23) = -1 EBADF (Bad file descriptor) [pid 5846] close(24) = -1 EBADF (Bad file descriptor) [pid 5846] close(25) = -1 EBADF (Bad file descriptor) [pid 5846] close(26) = -1 EBADF (Bad file descriptor) [pid 5846] close(27) = -1 EBADF (Bad file descriptor) [pid 5846] close(28) = -1 EBADF (Bad file descriptor) [pid 5846] close(29) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5847] <... futex resumed>) = ? [pid 5846] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5847] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./43/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./43/cgroup.cpu") = 0 [pid 5007] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./43/binderfs") = 0 [pid 5007] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./43/file0") = 0 [pid 5007] umount2("./43/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./43/cgroup") = 0 [pid 5007] umount2("./43/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./43/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./43/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./43") = 0 [pid 5007] mkdir("./44", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 134 ./strace-static-x86_64: Process 5865 attached [pid 5865] set_robust_list(0x5555571235e0, 24) = 0 [pid 5865] chdir("./44") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5865] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5865] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5865] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[135], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 135 [pid 5865] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5866 attached [pid 5866] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5866] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5866] close(3) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [ 112.021968][ T5866] loop0: detected capacity change from 0 to 32768 [ 112.033543][ T5866] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5866) [ 112.051106][ T5866] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 112.059897][ T5866] BTRFS info (device loop0): using free space tree [pid 5866] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5866] chdir("./file0") = 0 [pid 5866] ioctl(4, LOOP_CLR_FD) = 0 [pid 5866] close(4) = 0 [pid 5866] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5866] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5865] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... openat resumed>) = 4 [pid 5865] <... futex resumed>) = 0 [pid 5866] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... futex resumed>) = 0 [pid 5865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5865] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.079122][ T5866] BTRFS info (device loop0): enabling ssd optimizations [ 112.086507][ T5866] BTRFS info (device loop0): auto enabling async discard [ 112.119007][ T5866] BTRFS info (device loop0): balance: start -s [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5865] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5865] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5865] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5865] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5883 attached , parent_tid=[136], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 136 [pid 5865] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5865] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] set_robust_list(0x7fd089ba69e0, 24) = 0 [ 112.128707][ T5866] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5883] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5883] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5866] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.171882][ T5866] BTRFS info (device loop0): balance: ended with status: 0 [pid 5866] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5883] <... ioctl resumed>) = 0 [pid 5883] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] close(5) = 0 [pid 5865] close(6) = -1 EBADF (Bad file descriptor) [pid 5865] close(7) = -1 EBADF (Bad file descriptor) [pid 5865] close(8) = -1 EBADF (Bad file descriptor) [pid 5865] close(9) = -1 EBADF (Bad file descriptor) [pid 5865] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] close(11) = -1 EBADF (Bad file descriptor) [pid 5865] close(12) = -1 EBADF (Bad file descriptor) [pid 5865] close(13) = -1 EBADF (Bad file descriptor) [pid 5865] close(14) = -1 EBADF (Bad file descriptor) [pid 5865] close(15) = -1 EBADF (Bad file descriptor) [pid 5865] close(16) = -1 EBADF (Bad file descriptor) [pid 5865] close(17) = -1 EBADF (Bad file descriptor) [pid 5865] close(18) = -1 EBADF (Bad file descriptor) [pid 5865] close(19) = -1 EBADF (Bad file descriptor) [pid 5865] close(20) = -1 EBADF (Bad file descriptor) [pid 5865] close(21) = -1 EBADF (Bad file descriptor) [pid 5865] close(22) = -1 EBADF (Bad file descriptor) [pid 5865] close(23) = -1 EBADF (Bad file descriptor) [pid 5865] close(24) = -1 EBADF (Bad file descriptor) [pid 5865] close(25) = -1 EBADF (Bad file descriptor) [pid 5865] close(26) = -1 EBADF (Bad file descriptor) [pid 5865] close(27) = -1 EBADF (Bad file descriptor) [pid 5865] close(28) = -1 EBADF (Bad file descriptor) [pid 5865] close(29) = -1 EBADF (Bad file descriptor) [pid 5865] exit_group(0 [pid 5883] <... futex resumed>) = ? [pid 5866] <... futex resumed>) = ? [pid 5865] <... exit_group resumed>) = ? [pid 5883] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ [pid 5865] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./44/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./44/cgroup.cpu") = 0 [pid 5007] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./44/binderfs") = 0 [pid 5007] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./44/file0") = 0 [pid 5007] umount2("./44/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./44/cgroup") = 0 [pid 5007] umount2("./44/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./44/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./44/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./44") = 0 [pid 5007] mkdir("./45", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 137 ./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x5555571235e0, 24) = 0 [pid 5884] chdir("./45") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5884] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5884] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5884] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[138], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 138 [pid 5884] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5885 attached [pid 5885] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5885] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5885] close(3) = 0 [pid 5885] mkdir("./file0", 0777) = 0 [ 112.690793][ T5885] loop0: detected capacity change from 0 to 32768 [ 112.701737][ T5885] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5885) [ 112.719259][ T5885] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 112.728212][ T5885] BTRFS info (device loop0): using free space tree [pid 5885] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5885] chdir("./file0") = 0 [pid 5885] ioctl(4, LOOP_CLR_FD) = 0 [pid 5885] close(4) = 0 [pid 5885] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5885] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5884] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... openat resumed>) = 4 [pid 5884] <... futex resumed>) = 0 [pid 5885] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] <... futex resumed>) = 0 [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5884] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.748401][ T5885] BTRFS info (device loop0): enabling ssd optimizations [ 112.755523][ T5885] BTRFS info (device loop0): auto enabling async discard [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5884] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5884] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5884] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5884] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[139], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 139 [pid 5884] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5904 attached [pid 5904] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5904] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5904] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... futex resumed>) = 0 [pid 5904] <... futex resumed>) = 1 [pid 5884] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5884] <... futex resumed>) = 0 [ 112.789971][ T5885] BTRFS info (device loop0): balance: start -s [ 112.799233][ T5885] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5884] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 112.849378][ T5885] BTRFS info (device loop0): balance: ended with status: 0 [pid 5885] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5885] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] <... ioctl resumed>) = 0 [pid 5904] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5904] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] close(3) = 0 [pid 5884] close(4) = 0 [pid 5884] close(5) = 0 [pid 5884] close(6) = -1 EBADF (Bad file descriptor) [pid 5884] close(7) = -1 EBADF (Bad file descriptor) [pid 5884] close(8) = -1 EBADF (Bad file descriptor) [pid 5884] close(9) = -1 EBADF (Bad file descriptor) [pid 5884] close(10) = -1 EBADF (Bad file descriptor) [pid 5884] close(11) = -1 EBADF (Bad file descriptor) [pid 5884] close(12) = -1 EBADF (Bad file descriptor) [pid 5884] close(13) = -1 EBADF (Bad file descriptor) [pid 5884] close(14) = -1 EBADF (Bad file descriptor) [pid 5884] close(15) = -1 EBADF (Bad file descriptor) [pid 5884] close(16) = -1 EBADF (Bad file descriptor) [pid 5884] close(17) = -1 EBADF (Bad file descriptor) [pid 5884] close(18) = -1 EBADF (Bad file descriptor) [pid 5884] close(19) = -1 EBADF (Bad file descriptor) [pid 5884] close(20) = -1 EBADF (Bad file descriptor) [pid 5884] close(21) = -1 EBADF (Bad file descriptor) [pid 5884] close(22) = -1 EBADF (Bad file descriptor) [pid 5884] close(23) = -1 EBADF (Bad file descriptor) [pid 5884] close(24) = -1 EBADF (Bad file descriptor) [pid 5884] close(25) = -1 EBADF (Bad file descriptor) [pid 5884] close(26) = -1 EBADF (Bad file descriptor) [pid 5884] close(27) = -1 EBADF (Bad file descriptor) [pid 5884] close(28) = -1 EBADF (Bad file descriptor) [pid 5884] close(29) = -1 EBADF (Bad file descriptor) [pid 5884] exit_group(0) = ? [pid 5885] <... futex resumed>) = ? [pid 5904] <... futex resumed>) = ? [pid 5904] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5884] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./45/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./45/cgroup.cpu") = 0 [pid 5007] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./45/binderfs") = 0 [pid 5007] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./45/file0") = 0 [pid 5007] umount2("./45/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./45/cgroup") = 0 [pid 5007] umount2("./45/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./45/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./45/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./45") = 0 [pid 5007] mkdir("./46", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 140 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x5555571235e0, 24) = 0 [pid 5905] chdir("./46") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5905] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5905] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5905] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[141], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 141 [pid 5905] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5906] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5906] close(3) = 0 [pid 5906] mkdir("./file0", 0777) = 0 [ 113.359116][ T5906] loop0: detected capacity change from 0 to 32768 [ 113.370366][ T5906] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5906) [ 113.387369][ T5906] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.396168][ T5906] BTRFS info (device loop0): using free space tree [pid 5906] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5906] chdir("./file0") = 0 [pid 5906] ioctl(4, LOOP_CLR_FD) = 0 [pid 5906] close(4) = 0 [pid 5906] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5905] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... openat resumed>) = 4 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... futex resumed>) = 1 [ 113.415666][ T5906] BTRFS info (device loop0): enabling ssd optimizations [ 113.422922][ T5906] BTRFS info (device loop0): auto enabling async discard [pid 5906] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5905] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5905] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5905] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[142], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 142 [pid 5905] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5924] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5924] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5905] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 113.488251][ T5906] BTRFS info (device loop0): balance: start -s [ 113.519250][ T5906] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5905] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5924] <... ioctl resumed>) = 0 [pid 5924] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5906] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5906] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] close(5) = 0 [pid 5905] close(6) = -1 EBADF (Bad file descriptor) [pid 5905] close(7) = -1 EBADF (Bad file descriptor) [pid 5905] close(8) = -1 EBADF (Bad file descriptor) [pid 5905] close(9) = -1 EBADF (Bad file descriptor) [pid 5905] close(10) = -1 EBADF (Bad file descriptor) [pid 5905] close(11) = -1 EBADF (Bad file descriptor) [pid 5905] close(12) = -1 EBADF (Bad file descriptor) [pid 5905] close(13) = -1 EBADF (Bad file descriptor) [pid 5905] close(14) = -1 EBADF (Bad file descriptor) [pid 5905] close(15) = -1 EBADF (Bad file descriptor) [pid 5905] close(16) = -1 EBADF (Bad file descriptor) [pid 5905] close(17) = -1 EBADF (Bad file descriptor) [pid 5905] close(18) = -1 EBADF (Bad file descriptor) [pid 5905] close(19) = -1 EBADF (Bad file descriptor) [pid 5905] close(20) = -1 EBADF (Bad file descriptor) [pid 5905] close(21) = -1 EBADF (Bad file descriptor) [pid 5905] close(22) = -1 EBADF (Bad file descriptor) [pid 5905] close(23) = -1 EBADF (Bad file descriptor) [pid 5905] close(24) = -1 EBADF (Bad file descriptor) [pid 5905] close(25) = -1 EBADF (Bad file descriptor) [pid 5905] close(26) = -1 EBADF (Bad file descriptor) [pid 5905] close(27) = -1 EBADF (Bad file descriptor) [pid 5905] close(28) = -1 EBADF (Bad file descriptor) [pid 5905] close(29) = -1 EBADF (Bad file descriptor) [pid 5905] exit_group(0 [pid 5924] <... futex resumed>) = ? [pid 5906] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5924] +++ exited with 0 +++ [pid 5906] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 113.664401][ T5906] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./46/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./46/cgroup.cpu") = 0 [pid 5007] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./46/binderfs") = 0 [pid 5007] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./46/file0") = 0 [pid 5007] umount2("./46/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./46/cgroup") = 0 [pid 5007] umount2("./46/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./46/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./46/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./46") = 0 [pid 5007] mkdir("./47", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached [pid 5926] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 143 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5926] chdir("./47") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5926] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5926] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5926] write(3, "1000", 4) = 4 [pid 5926] close(3) = 0 [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5926] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5926] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[144], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 144 [pid 5926] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5927 attached [pid 5927] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5927] memfd_create("syzkaller", 0) = 3 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5927] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5927] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5927] close(3) = 0 [pid 5927] mkdir("./file0", 0777) = 0 [ 114.109055][ T5927] loop0: detected capacity change from 0 to 32768 [ 114.118841][ T5927] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5927) [ 114.137039][ T5927] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 114.146097][ T5927] BTRFS info (device loop0): using free space tree [pid 5927] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./file0") = 0 [pid 5927] ioctl(4, LOOP_CLR_FD) = 0 [pid 5927] close(4) = 0 [pid 5927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = 0 [pid 5927] <... futex resumed>) = 1 [pid 5927] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5926] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5927] <... openat resumed>) = 4 [pid 5927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5926] <... futex resumed>) = 0 [pid 5927] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5926] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 114.164677][ T5927] BTRFS info (device loop0): enabling ssd optimizations [ 114.171839][ T5927] BTRFS info (device loop0): auto enabling async discard [pid 5926] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5926] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5926] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5926] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5945 attached [pid 5945] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5945] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... clone resumed>, parent_tid=[145], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 145 [pid 5926] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5926] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5945] <... futex resumed>) = 0 [pid 5945] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5945] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 1 [pid 5926] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5945] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5926] <... futex resumed>) = 0 [ 114.249945][ T5927] BTRFS info (device loop0): balance: start -s [ 114.259198][ T5927] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5926] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5945] <... ioctl resumed>) = 0 [pid 5945] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5927] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] close(3) = 0 [pid 5926] close(4) = 0 [pid 5927] <... futex resumed>) = 0 [pid 5926] close(5 [pid 5927] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5926] <... close resumed>) = 0 [pid 5926] close(6) = -1 EBADF (Bad file descriptor) [pid 5926] close(7) = -1 EBADF (Bad file descriptor) [pid 5926] close(8) = -1 EBADF (Bad file descriptor) [pid 5926] close(9) = -1 EBADF (Bad file descriptor) [pid 5926] close(10) = -1 EBADF (Bad file descriptor) [pid 5926] close(11) = -1 EBADF (Bad file descriptor) [pid 5926] close(12) = -1 EBADF (Bad file descriptor) [pid 5926] close(13) = -1 EBADF (Bad file descriptor) [pid 5926] close(14) = -1 EBADF (Bad file descriptor) [pid 5926] close(15) = -1 EBADF (Bad file descriptor) [pid 5926] close(16) = -1 EBADF (Bad file descriptor) [pid 5926] close(17) = -1 EBADF (Bad file descriptor) [pid 5926] close(18) = -1 EBADF (Bad file descriptor) [pid 5926] close(19) = -1 EBADF (Bad file descriptor) [pid 5926] close(20) = -1 EBADF (Bad file descriptor) [pid 5926] close(21) = -1 EBADF (Bad file descriptor) [pid 5926] close(22) = -1 EBADF (Bad file descriptor) [pid 5926] close(23) = -1 EBADF (Bad file descriptor) [pid 5926] close(24) = -1 EBADF (Bad file descriptor) [pid 5926] close(25) = -1 EBADF (Bad file descriptor) [pid 5926] close(26) = -1 EBADF (Bad file descriptor) [pid 5926] close(27) = -1 EBADF (Bad file descriptor) [pid 5926] close(28) = -1 EBADF (Bad file descriptor) [pid 5926] close(29) = -1 EBADF (Bad file descriptor) [pid 5926] exit_group(0) = ? [pid 5945] <... futex resumed>) = ? [pid 5945] +++ exited with 0 +++ [pid 5927] <... futex resumed>) = ? [pid 5927] +++ exited with 0 +++ [pid 5926] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 114.425533][ T5927] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./47/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./47/cgroup.cpu") = 0 [pid 5007] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./47/binderfs") = 0 [pid 5007] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./47/file0") = 0 [pid 5007] umount2("./47/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./47/cgroup") = 0 [pid 5007] umount2("./47/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./47/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./47/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./47") = 0 [pid 5007] mkdir("./48", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5947 attached , child_tidptr=0x5555571235d0) = 146 [pid 5947] set_robust_list(0x5555571235e0, 24) = 0 [pid 5947] chdir("./48") = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5947] setpgid(0, 0) = 0 [pid 5947] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5947] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5947] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4) = 4 [pid 5947] close(3) = 0 [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5947] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5947] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x7fd090fc79e0, 24 [pid 5947] <... clone resumed>, parent_tid=[147], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 147 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5947] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5948] memfd_create("syzkaller", 0) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5948] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] close(3) = 0 [pid 5948] mkdir("./file0", 0777) = 0 [ 114.824162][ T5948] loop0: detected capacity change from 0 to 32768 [ 114.835354][ T5948] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5948) [ 114.852411][ T5948] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 114.861537][ T5948] BTRFS info (device loop0): using free space tree [pid 5948] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5948] chdir("./file0") = 0 [pid 5948] ioctl(4, LOOP_CLR_FD) = 0 [pid 5948] close(4) = 0 [pid 5948] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5948] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] <... futex resumed>) = 0 [pid 5947] <... futex resumed>) = 1 [pid 5948] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5947] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5948] <... futex resumed>) = 0 [pid 5948] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 114.881510][ T5948] BTRFS info (device loop0): enabling ssd optimizations [ 114.888679][ T5948] BTRFS info (device loop0): auto enabling async discard [pid 5947] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5947] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5947] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5947] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5965 attached , parent_tid=[148], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 148 [pid 5947] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5965] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5965] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = 1 [pid 5947] <... futex resumed>) = 0 [ 114.953961][ T5948] BTRFS info (device loop0): balance: start -s [ 114.962496][ T5948] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5947] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5965] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5947] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 115.012559][ T5948] BTRFS info (device loop0): balance: ended with status: 0 [pid 5948] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5948] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] <... ioctl resumed>) = 0 [pid 5965] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] close(3 [pid 5965] <... futex resumed>) = 0 [pid 5947] <... close resumed>) = 0 [pid 5947] close(4) = 0 [pid 5947] close(5) = 0 [pid 5947] close(6) = -1 EBADF (Bad file descriptor) [pid 5947] close(7) = -1 EBADF (Bad file descriptor) [pid 5947] close(8) = -1 EBADF (Bad file descriptor) [pid 5947] close(9) = -1 EBADF (Bad file descriptor) [pid 5947] close(10) = -1 EBADF (Bad file descriptor) [pid 5947] close(11) = -1 EBADF (Bad file descriptor) [pid 5947] close(12) = -1 EBADF (Bad file descriptor) [pid 5947] close(13) = -1 EBADF (Bad file descriptor) [pid 5947] close(14) = -1 EBADF (Bad file descriptor) [pid 5947] close(15) = -1 EBADF (Bad file descriptor) [pid 5947] close(16) = -1 EBADF (Bad file descriptor) [pid 5947] close(17) = -1 EBADF (Bad file descriptor) [pid 5947] close(18) = -1 EBADF (Bad file descriptor) [pid 5947] close(19) = -1 EBADF (Bad file descriptor) [pid 5947] close(20) = -1 EBADF (Bad file descriptor) [pid 5947] close(21) = -1 EBADF (Bad file descriptor) [pid 5947] close(22) = -1 EBADF (Bad file descriptor) [pid 5947] close(23) = -1 EBADF (Bad file descriptor) [pid 5947] close(24) = -1 EBADF (Bad file descriptor) [pid 5947] close(25) = -1 EBADF (Bad file descriptor) [pid 5947] close(26) = -1 EBADF (Bad file descriptor) [pid 5947] close(27) = -1 EBADF (Bad file descriptor) [pid 5947] close(28) = -1 EBADF (Bad file descriptor) [pid 5947] close(29) = -1 EBADF (Bad file descriptor) [pid 5947] exit_group(0 [pid 5948] <... futex resumed>) = ? [pid 5947] <... exit_group resumed>) = ? [pid 5948] +++ exited with 0 +++ [pid 5965] +++ exited with 0 +++ [pid 5947] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./48/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./48/cgroup.cpu") = 0 [pid 5007] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./48/binderfs") = 0 [pid 5007] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./48/file0") = 0 [pid 5007] umount2("./48/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./48/cgroup") = 0 [pid 5007] umount2("./48/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./48/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./48/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./48") = 0 [pid 5007] mkdir("./49", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 149 ./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x5555571235e0, 24) = 0 [pid 5966] chdir("./49") = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5966] setpgid(0, 0) = 0 [pid 5966] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5966] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5966] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5966] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5966] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[150], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 150 [pid 5966] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5967] memfd_create("syzkaller", 0) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5967] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5967] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5967] close(3) = 0 [pid 5967] mkdir("./file0", 0777) = 0 [ 115.505376][ T5967] loop0: detected capacity change from 0 to 32768 [ 115.516493][ T5967] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5967) [ 115.532951][ T5967] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.542090][ T5967] BTRFS info (device loop0): using free space tree [pid 5967] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5967] chdir("./file0") = 0 [pid 5967] ioctl(4, LOOP_CLR_FD) = 0 [pid 5967] close(4) = 0 [pid 5967] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5967] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 5966] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] <... openat resumed>) = 4 [pid 5966] <... futex resumed>) = 0 [pid 5967] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5967] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5966] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.561357][ T5967] BTRFS info (device loop0): enabling ssd optimizations [ 115.568899][ T5967] BTRFS info (device loop0): auto enabling async discard [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5966] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5966] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5966] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5984 attached , parent_tid=[151], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 151 [pid 5966] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] set_robust_list(0x7fd089ba69e0, 24 [pid 5966] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 5984] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5966] <... futex resumed>) = 0 [pid 5966] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5966] <... futex resumed>) = 0 [ 115.607488][ T5967] BTRFS info (device loop0): balance: start -s [ 115.616730][ T5967] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 5966] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5967] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5967] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 115.688234][ T5967] BTRFS info (device loop0): balance: ended with status: 0 [pid 5967] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5984] <... ioctl resumed>) = 0 [pid 5984] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] close(5) = 0 [pid 5966] close(6) = -1 EBADF (Bad file descriptor) [pid 5966] close(7) = -1 EBADF (Bad file descriptor) [pid 5966] close(8) = -1 EBADF (Bad file descriptor) [pid 5966] close(9) = -1 EBADF (Bad file descriptor) [pid 5966] close(10) = -1 EBADF (Bad file descriptor) [pid 5966] close(11) = -1 EBADF (Bad file descriptor) [pid 5966] close(12) = -1 EBADF (Bad file descriptor) [pid 5966] close(13) = -1 EBADF (Bad file descriptor) [pid 5966] close(14) = -1 EBADF (Bad file descriptor) [pid 5966] close(15) = -1 EBADF (Bad file descriptor) [pid 5966] close(16) = -1 EBADF (Bad file descriptor) [pid 5966] close(17) = -1 EBADF (Bad file descriptor) [pid 5966] close(18) = -1 EBADF (Bad file descriptor) [pid 5966] close(19) = -1 EBADF (Bad file descriptor) [pid 5966] close(20) = -1 EBADF (Bad file descriptor) [pid 5966] close(21) = -1 EBADF (Bad file descriptor) [pid 5966] close(22) = -1 EBADF (Bad file descriptor) [pid 5966] close(23) = -1 EBADF (Bad file descriptor) [pid 5966] close(24) = -1 EBADF (Bad file descriptor) [pid 5966] close(25) = -1 EBADF (Bad file descriptor) [pid 5966] close(26) = -1 EBADF (Bad file descriptor) [pid 5966] close(27) = -1 EBADF (Bad file descriptor) [pid 5966] close(28) = -1 EBADF (Bad file descriptor) [pid 5966] close(29) = -1 EBADF (Bad file descriptor) [pid 5966] exit_group(0 [pid 5984] <... futex resumed>) = ? [pid 5967] <... futex resumed>) = ? [pid 5966] <... exit_group resumed>) = ? [pid 5984] +++ exited with 0 +++ [pid 5967] +++ exited with 0 +++ [pid 5966] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./49/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./49/cgroup.cpu") = 0 [pid 5007] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./49/binderfs") = 0 [pid 5007] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./49/file0") = 0 [pid 5007] umount2("./49/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./49/cgroup") = 0 [pid 5007] umount2("./49/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./49/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./49/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./49") = 0 [pid 5007] mkdir("./50", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 152 ./strace-static-x86_64: Process 5985 attached [pid 5985] set_robust_list(0x5555571235e0, 24) = 0 [pid 5985] chdir("./50") = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5985] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5985] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 5985] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5986 attached [pid 5986] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 5985] <... clone resumed>, parent_tid=[153], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 153 [pid 5986] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 5986] memfd_create("syzkaller", 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5986] <... memfd_create resumed>) = 3 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5986] munmap(0x7fd088ba7000, 16777216) = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5986] close(3) = 0 [pid 5986] mkdir("./file0", 0777) = 0 [ 116.162858][ T5986] loop0: detected capacity change from 0 to 32768 [ 116.174066][ T5986] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (5986) [ 116.190892][ T5986] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.199848][ T5986] BTRFS info (device loop0): using free space tree [pid 5986] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5986] chdir("./file0") = 0 [pid 5986] ioctl(4, LOOP_CLR_FD) = 0 [pid 5986] close(4) = 0 [pid 5986] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] <... futex resumed>) = 1 [pid 5986] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 5986] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5985] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] <... futex resumed>) = 1 [ 116.219168][ T5986] BTRFS info (device loop0): enabling ssd optimizations [ 116.226308][ T5986] BTRFS info (device loop0): auto enabling async discard [pid 5986] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 5985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5985] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 5985] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5985] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6003] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... clone resumed>, parent_tid=[154], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 154 [pid 5985] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... futex resumed>) = 0 [pid 5985] <... futex resumed>) = 1 [pid 6003] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6003] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5985] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6003] <... futex resumed>) = 0 [ 116.268104][ T5986] BTRFS info (device loop0): balance: start -s [ 116.276583][ T5986] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6003] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 5985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5986] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 5986] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 116.361307][ T5986] BTRFS info (device loop0): balance: ended with status: 0 [pid 5986] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] <... ioctl resumed>) = 0 [pid 6003] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] close(3 [pid 6003] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... close resumed>) = 0 [pid 5985] close(4) = 0 [pid 5985] close(5) = 0 [pid 5985] close(6) = -1 EBADF (Bad file descriptor) [pid 5985] close(7) = -1 EBADF (Bad file descriptor) [pid 5985] close(8) = -1 EBADF (Bad file descriptor) [pid 5985] close(9) = -1 EBADF (Bad file descriptor) [pid 5985] close(10) = -1 EBADF (Bad file descriptor) [pid 5985] close(11) = -1 EBADF (Bad file descriptor) [pid 5985] close(12) = -1 EBADF (Bad file descriptor) [pid 5985] close(13) = -1 EBADF (Bad file descriptor) [pid 5985] close(14) = -1 EBADF (Bad file descriptor) [pid 5985] close(15) = -1 EBADF (Bad file descriptor) [pid 5985] close(16) = -1 EBADF (Bad file descriptor) [pid 5985] close(17) = -1 EBADF (Bad file descriptor) [pid 5985] close(18) = -1 EBADF (Bad file descriptor) [pid 5985] close(19) = -1 EBADF (Bad file descriptor) [pid 5985] close(20) = -1 EBADF (Bad file descriptor) [pid 5985] close(21) = -1 EBADF (Bad file descriptor) [pid 5985] close(22) = -1 EBADF (Bad file descriptor) [pid 5985] close(23) = -1 EBADF (Bad file descriptor) [pid 5985] close(24) = -1 EBADF (Bad file descriptor) [pid 5985] close(25) = -1 EBADF (Bad file descriptor) [pid 5985] close(26) = -1 EBADF (Bad file descriptor) [pid 5985] close(27) = -1 EBADF (Bad file descriptor) [pid 5985] close(28) = -1 EBADF (Bad file descriptor) [pid 5985] close(29) = -1 EBADF (Bad file descriptor) [pid 5985] exit_group(0 [pid 6003] <... futex resumed>) = ? [pid 5986] <... futex resumed>) = ? [pid 6003] +++ exited with 0 +++ [pid 5986] +++ exited with 0 +++ [pid 5985] <... exit_group resumed>) = ? [pid 5985] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./50/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./50/cgroup.cpu") = 0 [pid 5007] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./50/binderfs") = 0 [pid 5007] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./50/file0") = 0 [pid 5007] umount2("./50/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./50/cgroup") = 0 [pid 5007] umount2("./50/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./50/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./50/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./50") = 0 [pid 5007] mkdir("./51", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 155 [pid 6004] <... set_robust_list resumed>) = 0 [pid 6004] chdir("./51") = 0 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] setpgid(0, 0) = 0 [pid 6004] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6004] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6004] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6004] write(3, "1000", 4) = 4 [pid 6004] close(3) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6004] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6004] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6005 attached [pid 6005] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6005] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6004] <... clone resumed>, parent_tid=[156], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 156 [pid 6004] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6005] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6005] close(3) = 0 [pid 6005] mkdir("./file0", 0777) = 0 [ 116.855848][ T6005] loop0: detected capacity change from 0 to 32768 [ 116.867306][ T6005] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6005) [ 116.884807][ T6005] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.893765][ T6005] BTRFS info (device loop0): using free space tree [pid 6005] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6005] chdir("./file0") = 0 [pid 6005] ioctl(4, LOOP_CLR_FD) = 0 [pid 6005] close(4) = 0 [pid 6005] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6005] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6004] <... futex resumed>) = 0 [pid 6004] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6005] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... openat resumed>) = 4 [pid 6005] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6004] <... futex resumed>) = 0 [pid 6005] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6004] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 116.915671][ T6005] BTRFS info (device loop0): enabling ssd optimizations [ 116.922670][ T6005] BTRFS info (device loop0): auto enabling async discard [ 116.954479][ T6005] BTRFS info (device loop0): balance: start -s [pid 6004] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6004] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6004] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6004] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6022 attached , parent_tid=[157], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 157 [pid 6004] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] set_robust_list(0x7fd089ba69e0, 24 [pid 6004] <... futex resumed>) = 0 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6004] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6022] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = 1 [pid 6004] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6004] <... futex resumed>) = 0 [ 116.963902][ T6005] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6004] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 117.040652][ T6005] BTRFS info (device loop0): balance: ended with status: 0 [pid 6005] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6005] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6005] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6022] <... ioctl resumed>) = 0 [pid 6022] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6004] close(3 [pid 6022] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6004] <... close resumed>) = 0 [pid 6004] close(4) = 0 [pid 6004] close(5) = 0 [pid 6004] close(6) = -1 EBADF (Bad file descriptor) [pid 6004] close(7) = -1 EBADF (Bad file descriptor) [pid 6004] close(8) = -1 EBADF (Bad file descriptor) [pid 6004] close(9) = -1 EBADF (Bad file descriptor) [pid 6004] close(10) = -1 EBADF (Bad file descriptor) [pid 6004] close(11) = -1 EBADF (Bad file descriptor) [pid 6004] close(12) = -1 EBADF (Bad file descriptor) [pid 6004] close(13) = -1 EBADF (Bad file descriptor) [pid 6004] close(14) = -1 EBADF (Bad file descriptor) [pid 6004] close(15) = -1 EBADF (Bad file descriptor) [pid 6004] close(16) = -1 EBADF (Bad file descriptor) [pid 6004] close(17) = -1 EBADF (Bad file descriptor) [pid 6004] close(18) = -1 EBADF (Bad file descriptor) [pid 6004] close(19) = -1 EBADF (Bad file descriptor) [pid 6004] close(20) = -1 EBADF (Bad file descriptor) [pid 6004] close(21) = -1 EBADF (Bad file descriptor) [pid 6004] close(22) = -1 EBADF (Bad file descriptor) [pid 6004] close(23) = -1 EBADF (Bad file descriptor) [pid 6004] close(24) = -1 EBADF (Bad file descriptor) [pid 6004] close(25) = -1 EBADF (Bad file descriptor) [pid 6004] close(26) = -1 EBADF (Bad file descriptor) [pid 6004] close(27) = -1 EBADF (Bad file descriptor) [pid 6004] close(28) = -1 EBADF (Bad file descriptor) [pid 6004] close(29) = -1 EBADF (Bad file descriptor) [pid 6004] exit_group(0 [pid 6005] <... futex resumed>) = ? [pid 6022] <... futex resumed>) = ? [pid 6004] <... exit_group resumed>) = ? [pid 6005] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 6004] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./51/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./51/cgroup.cpu") = 0 [pid 5007] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./51/binderfs") = 0 [pid 5007] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./51/file0") = 0 [pid 5007] umount2("./51/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./51/cgroup") = 0 [pid 5007] umount2("./51/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./51/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./51/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./51") = 0 [pid 5007] mkdir("./52", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 158 ./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x5555571235e0, 24) = 0 [pid 6023] chdir("./52") = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6023] setpgid(0, 0) = 0 [pid 6023] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6023] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6023] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6023] write(3, "1000", 4) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6023] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6024 attached , parent_tid=[159], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 159 [pid 6024] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6023] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] memfd_create("syzkaller", 0 [pid 6023] <... futex resumed>) = 0 [pid 6024] <... memfd_create resumed>) = 3 [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6024] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6024] close(3) = 0 [pid 6024] mkdir("./file0", 0777) = 0 [ 117.531049][ T6024] loop0: detected capacity change from 0 to 32768 [ 117.542586][ T6024] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6024) [ 117.560296][ T6024] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 117.569196][ T6024] BTRFS info (device loop0): using free space tree [pid 6024] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file0") = 0 [pid 6024] ioctl(4, LOOP_CLR_FD) = 0 [pid 6024] close(4) = 0 [pid 6024] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = 1 [pid 6024] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... openat resumed>) = 4 [pid 6024] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6024] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6024] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 117.589765][ T6024] BTRFS info (device loop0): enabling ssd optimizations [ 117.596921][ T6024] BTRFS info (device loop0): auto enabling async discard [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 117.650768][ T6024] BTRFS info (device loop0): balance: start -s [ 117.660247][ T6024] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6023] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6023] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6023] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6023] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6041 attached [pid 6041] set_robust_list(0x7fd089ba69e0, 24 [pid 6023] <... clone resumed>, parent_tid=[160], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 160 [pid 6041] <... set_robust_list resumed>) = 0 [pid 6023] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] openat(AT_FDCWD, ".", O_RDONLY [pid 6023] <... futex resumed>) = 0 [pid 6023] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] <... openat resumed>) = 5 [pid 6041] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6041] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6023] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6024] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.693355][ T6024] BTRFS info (device loop0): balance: ended with status: 0 [pid 6024] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6041] <... ioctl resumed>) = 0 [pid 6041] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6041] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] close(3) = 0 [pid 6023] close(4) = 0 [pid 6023] close(5) = 0 [pid 6023] close(6) = -1 EBADF (Bad file descriptor) [pid 6023] close(7) = -1 EBADF (Bad file descriptor) [pid 6023] close(8) = -1 EBADF (Bad file descriptor) [pid 6023] close(9) = -1 EBADF (Bad file descriptor) [pid 6023] close(10) = -1 EBADF (Bad file descriptor) [pid 6023] close(11) = -1 EBADF (Bad file descriptor) [pid 6023] close(12) = -1 EBADF (Bad file descriptor) [pid 6023] close(13) = -1 EBADF (Bad file descriptor) [pid 6023] close(14) = -1 EBADF (Bad file descriptor) [pid 6023] close(15) = -1 EBADF (Bad file descriptor) [pid 6023] close(16) = -1 EBADF (Bad file descriptor) [pid 6023] close(17) = -1 EBADF (Bad file descriptor) [pid 6023] close(18) = -1 EBADF (Bad file descriptor) [pid 6023] close(19) = -1 EBADF (Bad file descriptor) [pid 6023] close(20) = -1 EBADF (Bad file descriptor) [pid 6023] close(21) = -1 EBADF (Bad file descriptor) [pid 6023] close(22) = -1 EBADF (Bad file descriptor) [pid 6023] close(23) = -1 EBADF (Bad file descriptor) [pid 6023] close(24) = -1 EBADF (Bad file descriptor) [pid 6023] close(25) = -1 EBADF (Bad file descriptor) [pid 6023] close(26) = -1 EBADF (Bad file descriptor) [pid 6023] close(27) = -1 EBADF (Bad file descriptor) [pid 6023] close(28) = -1 EBADF (Bad file descriptor) [pid 6023] close(29) = -1 EBADF (Bad file descriptor) [pid 6023] exit_group(0 [pid 6024] <... futex resumed>) = ? [pid 6041] <... futex resumed>) = ? [pid 6023] <... exit_group resumed>) = ? [pid 6041] +++ exited with 0 +++ [pid 6024] +++ exited with 0 +++ [pid 6023] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=158, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./52/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./52/cgroup.cpu") = 0 [pid 5007] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./52/binderfs") = 0 [pid 5007] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./52/file0") = 0 [pid 5007] umount2("./52/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./52/cgroup") = 0 [pid 5007] umount2("./52/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./52/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./52/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./52") = 0 [pid 5007] mkdir("./53", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 161 ./strace-static-x86_64: Process 6042 attached [pid 6042] set_robust_list(0x5555571235e0, 24) = 0 [pid 6042] chdir("./53") = 0 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6042] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6042] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6042] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6042] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6042] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[162], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 162 [pid 6042] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6043 attached [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6043] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6043] memfd_create("syzkaller", 0) = 3 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6043] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6043] close(3) = 0 [pid 6043] mkdir("./file0", 0777) = 0 [ 118.230589][ T6043] loop0: detected capacity change from 0 to 32768 [ 118.241845][ T6043] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6043) [ 118.258849][ T6043] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.267772][ T6043] BTRFS info (device loop0): using free space tree [pid 6043] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6043] chdir("./file0") = 0 [pid 6043] ioctl(4, LOOP_CLR_FD) = 0 [pid 6043] close(4) = 0 [pid 6043] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = 0 [pid 6042] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... futex resumed>) = 1 [pid 6043] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6043] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = 0 [pid 6042] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6043] <... futex resumed>) = 1 [ 118.288044][ T6043] BTRFS info (device loop0): enabling ssd optimizations [ 118.295243][ T6043] BTRFS info (device loop0): auto enabling async discard [pid 6043] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6042] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6042] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6042] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6060 attached [pid 6060] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6060] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] <... clone resumed>, parent_tid=[163], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 163 [pid 6042] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... futex resumed>) = 0 [pid 6042] <... futex resumed>) = 1 [pid 6060] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6060] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6060] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6042] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6060] <... futex resumed>) = 0 [pid 6042] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 118.333426][ T6043] BTRFS info (device loop0): balance: start -s [ 118.342136][ T6043] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6060] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6043] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6043] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 118.387756][ T6043] BTRFS info (device loop0): balance: ended with status: 0 [pid 6060] <... ioctl resumed>) = 0 [pid 6060] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] close(3 [pid 6060] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6042] <... close resumed>) = 0 [pid 6042] close(4) = 0 [pid 6042] close(5) = 0 [pid 6042] close(6) = -1 EBADF (Bad file descriptor) [pid 6042] close(7) = -1 EBADF (Bad file descriptor) [pid 6042] close(8) = -1 EBADF (Bad file descriptor) [pid 6042] close(9) = -1 EBADF (Bad file descriptor) [pid 6042] close(10) = -1 EBADF (Bad file descriptor) [pid 6042] close(11) = -1 EBADF (Bad file descriptor) [pid 6042] close(12) = -1 EBADF (Bad file descriptor) [pid 6042] close(13) = -1 EBADF (Bad file descriptor) [pid 6042] close(14) = -1 EBADF (Bad file descriptor) [pid 6042] close(15) = -1 EBADF (Bad file descriptor) [pid 6042] close(16) = -1 EBADF (Bad file descriptor) [pid 6042] close(17) = -1 EBADF (Bad file descriptor) [pid 6042] close(18) = -1 EBADF (Bad file descriptor) [pid 6042] close(19) = -1 EBADF (Bad file descriptor) [pid 6042] close(20) = -1 EBADF (Bad file descriptor) [pid 6042] close(21) = -1 EBADF (Bad file descriptor) [pid 6042] close(22) = -1 EBADF (Bad file descriptor) [pid 6042] close(23) = -1 EBADF (Bad file descriptor) [pid 6042] close(24) = -1 EBADF (Bad file descriptor) [pid 6042] close(25) = -1 EBADF (Bad file descriptor) [pid 6042] close(26) = -1 EBADF (Bad file descriptor) [pid 6042] close(27) = -1 EBADF (Bad file descriptor) [pid 6042] close(28) = -1 EBADF (Bad file descriptor) [pid 6042] close(29) = -1 EBADF (Bad file descriptor) [pid 6042] exit_group(0 [pid 6043] <... futex resumed>) = ? [pid 6060] <... futex resumed>) = ? [pid 6042] <... exit_group resumed>) = ? [pid 6043] +++ exited with 0 +++ [pid 6060] +++ exited with 0 +++ [pid 6042] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=161, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./53/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./53/cgroup.cpu") = 0 [pid 5007] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./53/binderfs") = 0 [pid 5007] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./53/file0") = 0 [pid 5007] umount2("./53/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./53/cgroup") = 0 [pid 5007] umount2("./53/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./53/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./53/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./53") = 0 [pid 5007] mkdir("./54", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 164 ./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x5555571235e0, 24) = 0 [pid 6061] chdir("./54") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6061] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6061] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6061] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6062 attached [pid 6062] set_robust_list(0x7fd090fc79e0, 24 [pid 6061] <... clone resumed>, parent_tid=[165], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 165 [pid 6061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... set_robust_list resumed>) = 0 [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6062] memfd_create("syzkaller", 0) = 3 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6062] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6062] close(3) = 0 [pid 6062] mkdir("./file0", 0777) = 0 [ 118.907932][ T6062] loop0: detected capacity change from 0 to 32768 [ 118.919101][ T6062] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6062) [ 118.936912][ T6062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.945809][ T6062] BTRFS info (device loop0): using free space tree [pid 6062] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file0") = 0 [pid 6062] ioctl(4, LOOP_CLR_FD) = 0 [pid 6062] close(4) = 0 [pid 6062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6062] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... openat resumed>) = 4 [pid 6061] <... futex resumed>) = 0 [pid 6062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6062] <... futex resumed>) = 0 [pid 6061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6061] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.965116][ T6062] BTRFS info (device loop0): enabling ssd optimizations [ 118.972174][ T6062] BTRFS info (device loop0): auto enabling async discard [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6061] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6061] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6061] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[166], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 166 [pid 6061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 119.009924][ T6062] BTRFS info (device loop0): balance: start -s [ 119.018750][ T6062] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6079] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] <... futex resumed>) = 1 [pid 6079] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 119.063395][ T6062] BTRFS info (device loop0): balance: ended with status: 0 [pid 6062] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6062] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] <... ioctl resumed>) = 0 [pid 6079] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] close(5) = 0 [pid 6061] close(6) = -1 EBADF (Bad file descriptor) [pid 6061] close(7) = -1 EBADF (Bad file descriptor) [pid 6061] close(8) = -1 EBADF (Bad file descriptor) [pid 6061] close(9) = -1 EBADF (Bad file descriptor) [pid 6061] close(10) = -1 EBADF (Bad file descriptor) [pid 6061] close(11) = -1 EBADF (Bad file descriptor) [pid 6061] close(12) = -1 EBADF (Bad file descriptor) [pid 6061] close(13) = -1 EBADF (Bad file descriptor) [pid 6061] close(14) = -1 EBADF (Bad file descriptor) [pid 6061] close(15) = -1 EBADF (Bad file descriptor) [pid 6061] close(16) = -1 EBADF (Bad file descriptor) [pid 6061] close(17) = -1 EBADF (Bad file descriptor) [pid 6061] close(18) = -1 EBADF (Bad file descriptor) [pid 6061] close(19) = -1 EBADF (Bad file descriptor) [pid 6061] close(20) = -1 EBADF (Bad file descriptor) [pid 6061] close(21) = -1 EBADF (Bad file descriptor) [pid 6061] close(22) = -1 EBADF (Bad file descriptor) [pid 6061] close(23) = -1 EBADF (Bad file descriptor) [pid 6061] close(24) = -1 EBADF (Bad file descriptor) [pid 6061] close(25) = -1 EBADF (Bad file descriptor) [pid 6061] close(26) = -1 EBADF (Bad file descriptor) [pid 6061] close(27) = -1 EBADF (Bad file descriptor) [pid 6061] close(28) = -1 EBADF (Bad file descriptor) [pid 6061] close(29) = -1 EBADF (Bad file descriptor) [pid 6061] exit_group(0 [pid 6079] <... futex resumed>) = ? [pid 6062] <... futex resumed>) = ? [pid 6061] <... exit_group resumed>) = ? [pid 6079] +++ exited with 0 +++ [pid 6062] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=164, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./54/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./54/cgroup.cpu") = 0 [pid 5007] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./54/binderfs") = 0 [pid 5007] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./54/file0") = 0 [pid 5007] umount2("./54/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./54/cgroup") = 0 [pid 5007] umount2("./54/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./54/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./54/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./54") = 0 [pid 5007] mkdir("./55", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 167 ./strace-static-x86_64: Process 6080 attached [pid 6080] set_robust_list(0x5555571235e0, 24) = 0 [pid 6080] chdir("./55") = 0 [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6080] setpgid(0, 0) = 0 [pid 6080] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6080] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6080] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6080] write(3, "1000", 4) = 4 [pid 6080] close(3) = 0 [pid 6080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6080] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6080] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6081 attached [pid 6081] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] <... clone resumed>, parent_tid=[168], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 168 [pid 6080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = 1 [pid 6081] memfd_create("syzkaller", 0 [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6081] <... memfd_create resumed>) = 3 [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6081] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6081] close(3) = 0 [pid 6081] mkdir("./file0", 0777) = 0 [ 119.608228][ T6081] loop0: detected capacity change from 0 to 32768 [ 119.618783][ T6081] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6081) [ 119.635957][ T6081] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 119.644722][ T6081] BTRFS info (device loop0): using free space tree [pid 6081] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6081] chdir("./file0") = 0 [pid 6081] ioctl(4, LOOP_CLR_FD) = 0 [pid 6081] close(4) = 0 [pid 6081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6080] <... futex resumed>) = 0 [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6081] <... openat resumed>) = 4 [pid 6081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = 1 [pid 6081] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 119.663596][ T6081] BTRFS info (device loop0): enabling ssd optimizations [ 119.670824][ T6081] BTRFS info (device loop0): auto enabling async discard [pid 6080] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6080] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6080] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6080] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] <... clone resumed>, parent_tid=[169], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 169 [pid 6080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = 0 [pid 6098] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6080] <... futex resumed>) = 0 [pid 6080] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.715511][ T6081] BTRFS info (device loop0): balance: start -s [ 119.734076][ T6081] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6098] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6098] <... ioctl resumed>) = 0 [pid 6098] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6098] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6081] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6080] close(3) = 0 [pid 6080] close(4) = 0 [pid 6080] close(5) = 0 [pid 6080] close(6) = -1 EBADF (Bad file descriptor) [pid 6080] close(7) = -1 EBADF (Bad file descriptor) [pid 6080] close(8) = -1 EBADF (Bad file descriptor) [pid 6080] close(9) = -1 EBADF (Bad file descriptor) [pid 6080] close(10) = -1 EBADF (Bad file descriptor) [pid 6080] close(11) = -1 EBADF (Bad file descriptor) [pid 6080] close(12) = -1 EBADF (Bad file descriptor) [pid 6080] close(13) = -1 EBADF (Bad file descriptor) [pid 6080] close(14) = -1 EBADF (Bad file descriptor) [pid 6080] close(15) = -1 EBADF (Bad file descriptor) [pid 6080] close(16) = -1 EBADF (Bad file descriptor) [pid 6080] close(17) = -1 EBADF (Bad file descriptor) [pid 6080] close(18) = -1 EBADF (Bad file descriptor) [pid 6080] close(19) = -1 EBADF (Bad file descriptor) [pid 6080] close(20) = -1 EBADF (Bad file descriptor) [pid 6080] close(21) = -1 EBADF (Bad file descriptor) [pid 6080] close(22) = -1 EBADF (Bad file descriptor) [pid 6080] close(23) = -1 EBADF (Bad file descriptor) [pid 6080] close(24) = -1 EBADF (Bad file descriptor) [pid 6080] close(25) = -1 EBADF (Bad file descriptor) [pid 6080] close(26) = -1 EBADF (Bad file descriptor) [pid 6080] close(27) = -1 EBADF (Bad file descriptor) [pid 6080] close(28) = -1 EBADF (Bad file descriptor) [pid 6080] close(29) = -1 EBADF (Bad file descriptor) [pid 6080] exit_group(0 [pid 6098] <... futex resumed>) = ? [pid 6081] <... futex resumed>) = ? [pid 6080] <... exit_group resumed>) = ? [pid 6098] +++ exited with 0 +++ [pid 6081] +++ exited with 0 +++ [pid 6080] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=167, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5007] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./55/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./55/cgroup.cpu") = 0 [pid 5007] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./55/binderfs") = 0 [ 119.936114][ T6081] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./55/file0") = 0 [pid 5007] umount2("./55/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./55/cgroup") = 0 [pid 5007] umount2("./55/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./55/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./55/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./55") = 0 [pid 5007] mkdir("./56", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 170 ./strace-static-x86_64: Process 6099 attached [pid 6099] set_robust_list(0x5555571235e0, 24) = 0 [pid 6099] chdir("./56") = 0 [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6099] setpgid(0, 0) = 0 [pid 6099] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6099] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6099] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6099] write(3, "1000", 4) = 4 [pid 6099] close(3) = 0 [pid 6099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6099] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6099] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6100 attached [pid 6100] set_robust_list(0x7fd090fc79e0, 24 [pid 6099] <... clone resumed>, parent_tid=[171], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 171 [pid 6100] <... set_robust_list resumed>) = 0 [pid 6099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6100] memfd_create("syzkaller", 0) = 3 [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6100] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6100] close(3) = 0 [pid 6100] mkdir("./file0", 0777) = 0 [ 120.342254][ T6100] loop0: detected capacity change from 0 to 32768 [ 120.353760][ T6100] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6100) [ 120.371687][ T6100] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 120.380795][ T6100] BTRFS info (device loop0): using free space tree [pid 6100] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6100] chdir("./file0") = 0 [pid 6100] ioctl(4, LOOP_CLR_FD) = 0 [pid 6100] close(4) = 0 [pid 6100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6099] <... futex resumed>) = 0 [pid 6100] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] <... openat resumed>) = 4 [pid 6099] <... futex resumed>) = 0 [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6099] <... futex resumed>) = 0 [pid 6100] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6099] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.401731][ T6100] BTRFS info (device loop0): enabling ssd optimizations [ 120.408903][ T6100] BTRFS info (device loop0): auto enabling async discard [ 120.456652][ T6100] BTRFS info (device loop0): balance: start -s [ 120.466747][ T6100] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6099] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6099] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6099] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6099] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6117 attached [pid 6117] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... clone resumed>, parent_tid=[172], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 172 [pid 6099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = 0 [pid 6099] <... futex resumed>) = 1 [pid 6117] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6099] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6117] <... futex resumed>) = 0 [pid 6099] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 120.503684][ T6100] BTRFS info (device loop0): balance: ended with status: 0 [pid 6117] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6100] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6100] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6117] <... ioctl resumed>) = 0 [pid 6117] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] close(3 [pid 6117] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... close resumed>) = 0 [pid 6099] close(4) = 0 [pid 6099] close(5) = 0 [pid 6099] close(6) = -1 EBADF (Bad file descriptor) [pid 6099] close(7) = -1 EBADF (Bad file descriptor) [pid 6099] close(8) = -1 EBADF (Bad file descriptor) [pid 6099] close(9) = -1 EBADF (Bad file descriptor) [pid 6099] close(10) = -1 EBADF (Bad file descriptor) [pid 6099] close(11) = -1 EBADF (Bad file descriptor) [pid 6099] close(12) = -1 EBADF (Bad file descriptor) [pid 6099] close(13) = -1 EBADF (Bad file descriptor) [pid 6099] close(14) = -1 EBADF (Bad file descriptor) [pid 6099] close(15) = -1 EBADF (Bad file descriptor) [pid 6099] close(16) = -1 EBADF (Bad file descriptor) [pid 6099] close(17) = -1 EBADF (Bad file descriptor) [pid 6099] close(18) = -1 EBADF (Bad file descriptor) [pid 6099] close(19) = -1 EBADF (Bad file descriptor) [pid 6099] close(20) = -1 EBADF (Bad file descriptor) [pid 6099] close(21) = -1 EBADF (Bad file descriptor) [pid 6099] close(22) = -1 EBADF (Bad file descriptor) [pid 6099] close(23) = -1 EBADF (Bad file descriptor) [pid 6099] close(24) = -1 EBADF (Bad file descriptor) [pid 6099] close(25) = -1 EBADF (Bad file descriptor) [pid 6099] close(26) = -1 EBADF (Bad file descriptor) [pid 6099] close(27) = -1 EBADF (Bad file descriptor) [pid 6099] close(28) = -1 EBADF (Bad file descriptor) [pid 6099] close(29) = -1 EBADF (Bad file descriptor) [pid 6099] exit_group(0 [pid 6117] <... futex resumed>) = ? [pid 6100] <... futex resumed>) = ? [pid 6099] <... exit_group resumed>) = ? [pid 6117] +++ exited with 0 +++ [pid 6100] +++ exited with 0 +++ [pid 6099] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=170, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./56/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./56/cgroup.cpu") = 0 [pid 5007] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./56/binderfs") = 0 [pid 5007] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./56/file0") = 0 [pid 5007] umount2("./56/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./56/cgroup") = 0 [pid 5007] umount2("./56/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./56/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./56/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./56") = 0 [pid 5007] mkdir("./57", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6118 attached , child_tidptr=0x5555571235d0) = 173 [pid 6118] set_robust_list(0x5555571235e0, 24) = 0 [pid 6118] chdir("./57") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6118] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6118] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[174], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 174 [pid 6118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6119] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] mkdir("./file0", 0777) = 0 [ 121.084707][ T6119] loop0: detected capacity change from 0 to 32768 [ 121.095325][ T6119] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6119) [ 121.113396][ T6119] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.122384][ T6119] BTRFS info (device loop0): using free space tree [pid 6119] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file0") = 0 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6119] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... openat resumed>) = 4 [pid 6119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... futex resumed>) = 0 [pid 6118] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6119] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 121.144149][ T6119] BTRFS info (device loop0): enabling ssd optimizations [ 121.151602][ T6119] BTRFS info (device loop0): auto enabling async discard [pid 6118] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6118] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6118] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... clone resumed>, parent_tid=[175], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 175 [pid 6118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6136] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6136] <... futex resumed>) = 0 [ 121.207610][ T6119] BTRFS info (device loop0): balance: start -s [ 121.218426][ T6119] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6136] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6118] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 121.306356][ T6119] BTRFS info (device loop0): balance: ended with status: 0 [pid 6136] <... ioctl resumed>) = 0 [pid 6136] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6119] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] close(3 [pid 6119] <... futex resumed>) = 0 [pid 6119] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... close resumed>) = 0 [pid 6118] close(4) = 0 [pid 6118] close(5) = 0 [pid 6118] close(6) = -1 EBADF (Bad file descriptor) [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8) = -1 EBADF (Bad file descriptor) [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0 [pid 6136] <... futex resumed>) = ? [pid 6118] <... exit_group resumed>) = ? [pid 6119] <... futex resumed>) = ? [pid 6136] +++ exited with 0 +++ [pid 6119] +++ exited with 0 +++ [pid 6118] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=173, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5007] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./57/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./57/cgroup.cpu") = 0 [pid 5007] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./57/binderfs") = 0 [pid 5007] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./57/file0") = 0 [pid 5007] umount2("./57/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./57/cgroup") = 0 [pid 5007] umount2("./57/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./57/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./57/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./57") = 0 [pid 5007] mkdir("./58", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 176 ./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x5555571235e0, 24) = 0 [pid 6137] chdir("./58") = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6137] setpgid(0, 0) = 0 [pid 6137] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6137] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6137] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6137] write(3, "1000", 4) = 4 [pid 6137] close(3) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6137] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6137] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6138 attached [pid 6138] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6137] <... clone resumed>, parent_tid=[177], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 177 [pid 6137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] memfd_create("syzkaller", 0 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6138] <... memfd_create resumed>) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6138] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6138] close(3) = 0 [pid 6138] mkdir("./file0", 0777) = 0 [ 121.775521][ T6138] loop0: detected capacity change from 0 to 32768 [ 121.786883][ T6138] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6138) [ 121.804666][ T6138] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.813511][ T6138] BTRFS info (device loop0): using free space tree [pid 6138] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6138] chdir("./file0") = 0 [pid 6138] ioctl(4, LOOP_CLR_FD) = 0 [pid 6138] close(4) = 0 [pid 6138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 6138] <... futex resumed>) = 1 [pid 6137] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6137] <... futex resumed>) = 0 [ 121.833961][ T6138] BTRFS info (device loop0): enabling ssd optimizations [ 121.841086][ T6138] BTRFS info (device loop0): auto enabling async discard [pid 6137] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6137] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6137] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6137] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6155 attached , parent_tid=[178], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 178 [pid 6155] set_robust_list(0x7fd089ba69e0, 24 [pid 6137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] <... set_robust_list resumed>) = 0 [pid 6137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 121.891021][ T6138] BTRFS info (device loop0): balance: start -s [ 121.899992][ T6138] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6137] <... futex resumed>) = 0 [pid 6137] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6138] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6138] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 121.941560][ T6138] BTRFS info (device loop0): balance: ended with status: 0 [pid 6155] <... ioctl resumed>) = 0 [pid 6155] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] close(3 [pid 6155] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... close resumed>) = 0 [pid 6137] close(4) = 0 [pid 6137] close(5) = 0 [pid 6137] close(6) = -1 EBADF (Bad file descriptor) [pid 6137] close(7) = -1 EBADF (Bad file descriptor) [pid 6137] close(8) = -1 EBADF (Bad file descriptor) [pid 6137] close(9) = -1 EBADF (Bad file descriptor) [pid 6137] close(10) = -1 EBADF (Bad file descriptor) [pid 6137] close(11) = -1 EBADF (Bad file descriptor) [pid 6137] close(12) = -1 EBADF (Bad file descriptor) [pid 6137] close(13) = -1 EBADF (Bad file descriptor) [pid 6137] close(14) = -1 EBADF (Bad file descriptor) [pid 6137] close(15) = -1 EBADF (Bad file descriptor) [pid 6137] close(16) = -1 EBADF (Bad file descriptor) [pid 6137] close(17) = -1 EBADF (Bad file descriptor) [pid 6137] close(18) = -1 EBADF (Bad file descriptor) [pid 6137] close(19) = -1 EBADF (Bad file descriptor) [pid 6137] close(20) = -1 EBADF (Bad file descriptor) [pid 6137] close(21) = -1 EBADF (Bad file descriptor) [pid 6137] close(22) = -1 EBADF (Bad file descriptor) [pid 6137] close(23) = -1 EBADF (Bad file descriptor) [pid 6137] close(24) = -1 EBADF (Bad file descriptor) [pid 6137] close(25) = -1 EBADF (Bad file descriptor) [pid 6137] close(26) = -1 EBADF (Bad file descriptor) [pid 6137] close(27) = -1 EBADF (Bad file descriptor) [pid 6137] close(28) = -1 EBADF (Bad file descriptor) [pid 6137] close(29) = -1 EBADF (Bad file descriptor) [pid 6137] exit_group(0 [pid 6155] <... futex resumed>) = ? [pid 6138] <... futex resumed>) = ? [pid 6137] <... exit_group resumed>) = ? [pid 6155] +++ exited with 0 +++ [pid 6138] +++ exited with 0 +++ [pid 6137] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=176, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./58/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./58/cgroup.cpu") = 0 [pid 5007] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./58/binderfs") = 0 [pid 5007] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./58/file0") = 0 [pid 5007] umount2("./58/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./58/cgroup") = 0 [pid 5007] umount2("./58/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./58/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./58/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./58") = 0 [pid 5007] mkdir("./59", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6156 attached , child_tidptr=0x5555571235d0) = 179 [pid 6156] set_robust_list(0x5555571235e0, 24) = 0 [pid 6156] chdir("./59") = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6156] setpgid(0, 0) = 0 [pid 6156] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6156] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6156] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6156] write(3, "1000", 4) = 4 [pid 6156] close(3) = 0 [pid 6156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6156] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6156] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[180], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 180 [pid 6156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6157 attached [pid 6157] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6157] memfd_create("syzkaller", 0) = 3 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6157] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6157] close(3) = 0 [pid 6157] mkdir("./file0", 0777) = 0 [ 122.478736][ T6157] loop0: detected capacity change from 0 to 32768 [ 122.490154][ T6157] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6157) [ 122.505809][ T6157] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 122.514569][ T6157] BTRFS info (device loop0): using free space tree [pid 6157] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6157] chdir("./file0") = 0 [pid 6157] ioctl(4, LOOP_CLR_FD) = 0 [pid 6157] close(4) = 0 [pid 6157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6156] <... futex resumed>) = 0 [pid 6157] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6157] <... openat resumed>) = 4 [pid 6157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6156] <... futex resumed>) = 0 [pid 6157] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6156] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.534078][ T6157] BTRFS info (device loop0): enabling ssd optimizations [ 122.541408][ T6157] BTRFS info (device loop0): auto enabling async discard [pid 6156] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6156] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6156] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6156] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6174 attached [pid 6174] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... clone resumed>, parent_tid=[181], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 181 [ 122.583640][ T6157] BTRFS info (device loop0): balance: start -s [ 122.592731][ T6157] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] <... futex resumed>) = 0 [pid 6174] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6156] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] <... futex resumed>) = 0 [pid 6174] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 122.633724][ T6157] BTRFS info (device loop0): balance: ended with status: 0 [pid 6156] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6157] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6157] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6174] <... ioctl resumed>) = 0 [pid 6174] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] close(3 [pid 6174] <... futex resumed>) = 0 [pid 6174] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6156] <... close resumed>) = 0 [pid 6156] close(4) = 0 [pid 6156] close(5) = 0 [pid 6156] close(6) = -1 EBADF (Bad file descriptor) [pid 6156] close(7) = -1 EBADF (Bad file descriptor) [pid 6156] close(8) = -1 EBADF (Bad file descriptor) [pid 6156] close(9) = -1 EBADF (Bad file descriptor) [pid 6156] close(10) = -1 EBADF (Bad file descriptor) [pid 6156] close(11) = -1 EBADF (Bad file descriptor) [pid 6156] close(12) = -1 EBADF (Bad file descriptor) [pid 6156] close(13) = -1 EBADF (Bad file descriptor) [pid 6156] close(14) = -1 EBADF (Bad file descriptor) [pid 6156] close(15) = -1 EBADF (Bad file descriptor) [pid 6156] close(16) = -1 EBADF (Bad file descriptor) [pid 6156] close(17) = -1 EBADF (Bad file descriptor) [pid 6156] close(18) = -1 EBADF (Bad file descriptor) [pid 6156] close(19) = -1 EBADF (Bad file descriptor) [pid 6156] close(20) = -1 EBADF (Bad file descriptor) [pid 6156] close(21) = -1 EBADF (Bad file descriptor) [pid 6156] close(22) = -1 EBADF (Bad file descriptor) [pid 6156] close(23) = -1 EBADF (Bad file descriptor) [pid 6156] close(24) = -1 EBADF (Bad file descriptor) [pid 6156] close(25) = -1 EBADF (Bad file descriptor) [pid 6156] close(26) = -1 EBADF (Bad file descriptor) [pid 6156] close(27) = -1 EBADF (Bad file descriptor) [pid 6156] close(28) = -1 EBADF (Bad file descriptor) [pid 6156] close(29) = -1 EBADF (Bad file descriptor) [pid 6156] exit_group(0 [pid 6174] <... futex resumed>) = ? [pid 6157] <... futex resumed>) = ? [pid 6156] <... exit_group resumed>) = ? [pid 6174] +++ exited with 0 +++ [pid 6157] +++ exited with 0 +++ [pid 6156] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=179, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./59/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./59/cgroup.cpu") = 0 [pid 5007] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./59/binderfs") = 0 [pid 5007] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./59/file0") = 0 [pid 5007] umount2("./59/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./59/cgroup") = 0 [pid 5007] umount2("./59/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./59/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./59/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./59") = 0 [pid 5007] mkdir("./60", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 182 ./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x5555571235e0, 24) = 0 [pid 6175] chdir("./60") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6175] setpgid(0, 0) = 0 [pid 6175] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6175] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6175] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6175] write(3, "1000", 4) = 4 [pid 6175] close(3) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6175] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6175] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x7fd090fc79e0, 24 [pid 6175] <... clone resumed>, parent_tid=[183], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 183 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6175] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6176] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6176] close(3) = 0 [pid 6176] mkdir("./file0", 0777) = 0 [ 123.181378][ T6176] loop0: detected capacity change from 0 to 32768 [ 123.192972][ T6176] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6176) [ 123.210870][ T6176] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.220034][ T6176] BTRFS info (device loop0): using free space tree [pid 6176] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6176] chdir("./file0") = 0 [pid 6176] ioctl(4, LOOP_CLR_FD) = 0 [pid 6176] close(4) = 0 [pid 6176] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6175] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] <... openat resumed>) = 4 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... futex resumed>) = 1 [ 123.239951][ T6176] BTRFS info (device loop0): enabling ssd optimizations [ 123.247457][ T6176] BTRFS info (device loop0): auto enabling async discard [pid 6176] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6175] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6175] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x7fd089ba69e0, 24 [pid 6175] <... clone resumed>, parent_tid=[184], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 184 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6175] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] openat(AT_FDCWD, ".", O_RDONLY [pid 6175] <... futex resumed>) = 0 [pid 6193] <... openat resumed>) = 5 [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6193] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6175] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6176] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.282594][ T6176] BTRFS info (device loop0): balance: start -s [ 123.290864][ T6176] BTRFS info (device loop0): relocating block group 1048576 flags system [ 123.319383][ T6176] BTRFS info (device loop0): balance: ended with status: 0 [pid 6176] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6175] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6193] <... ioctl resumed>) = 0 [pid 6193] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] close(3) = 0 [pid 6175] close(4) = 0 [pid 6175] close(5) = 0 [pid 6175] close(6) = -1 EBADF (Bad file descriptor) [pid 6175] close(7) = -1 EBADF (Bad file descriptor) [pid 6175] close(8) = -1 EBADF (Bad file descriptor) [pid 6175] close(9) = -1 EBADF (Bad file descriptor) [pid 6175] close(10) = -1 EBADF (Bad file descriptor) [pid 6175] close(11) = -1 EBADF (Bad file descriptor) [pid 6175] close(12) = -1 EBADF (Bad file descriptor) [pid 6175] close(13) = -1 EBADF (Bad file descriptor) [pid 6175] close(14) = -1 EBADF (Bad file descriptor) [pid 6175] close(15) = -1 EBADF (Bad file descriptor) [pid 6175] close(16) = -1 EBADF (Bad file descriptor) [pid 6175] close(17) = -1 EBADF (Bad file descriptor) [pid 6175] close(18) = -1 EBADF (Bad file descriptor) [pid 6175] close(19) = -1 EBADF (Bad file descriptor) [pid 6175] close(20) = -1 EBADF (Bad file descriptor) [pid 6175] close(21) = -1 EBADF (Bad file descriptor) [pid 6175] close(22) = -1 EBADF (Bad file descriptor) [pid 6175] close(23) = -1 EBADF (Bad file descriptor) [pid 6175] close(24) = -1 EBADF (Bad file descriptor) [pid 6175] close(25) = -1 EBADF (Bad file descriptor) [pid 6175] close(26) = -1 EBADF (Bad file descriptor) [pid 6175] close(27) = -1 EBADF (Bad file descriptor) [pid 6175] close(28) = -1 EBADF (Bad file descriptor) [pid 6175] close(29) = -1 EBADF (Bad file descriptor) [pid 6175] exit_group(0 [pid 6193] <... futex resumed>) = ? [pid 6176] <... futex resumed>) = ? [pid 6175] <... exit_group resumed>) = ? [pid 6193] +++ exited with 0 +++ [pid 6176] +++ exited with 0 +++ [pid 6175] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=182, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./60/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./60/cgroup.cpu") = 0 [pid 5007] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./60/binderfs") = 0 [pid 5007] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./60/file0") = 0 [pid 5007] umount2("./60/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./60/cgroup") = 0 [pid 5007] umount2("./60/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./60/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./60/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./60") = 0 [pid 5007] mkdir("./61", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6194 attached [pid 6194] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 185 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6194] chdir("./61") = 0 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] setpgid(0, 0) = 0 [pid 6194] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6194] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6194] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6194] write(3, "1000", 4) = 4 [pid 6194] close(3) = 0 [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6194] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6195 attached , parent_tid=[186], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 186 [pid 6195] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6195] memfd_create("syzkaller", 0 [pid 6194] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... memfd_create resumed>) = 3 [pid 6194] <... futex resumed>) = 0 [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6195] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6195] close(3) = 0 [pid 6195] mkdir("./file0", 0777) = 0 [ 123.842518][ T6195] loop0: detected capacity change from 0 to 32768 [ 123.853776][ T6195] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6195) [ 123.874966][ T6195] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.883837][ T6195] BTRFS info (device loop0): using free space tree [pid 6195] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6195] chdir("./file0") = 0 [pid 6195] ioctl(4, LOOP_CLR_FD) = 0 [pid 6195] close(4) = 0 [pid 6195] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] <... futex resumed>) = 0 [pid 6195] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6194] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6195] <... openat resumed>) = 4 [pid 6195] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] <... futex resumed>) = 0 [pid 6195] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6194] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.905367][ T6195] BTRFS info (device loop0): enabling ssd optimizations [ 123.912413][ T6195] BTRFS info (device loop0): auto enabling async discard [pid 6194] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6194] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6194] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6212 attached [pid 6212] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6212] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] <... clone resumed>, parent_tid=[187], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 187 [pid 6194] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... futex resumed>) = 0 [pid 6194] <... futex resumed>) = 1 [pid 6212] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6212] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 123.963882][ T6195] BTRFS info (device loop0): balance: start -s [ 123.976626][ T6195] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6194] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... futex resumed>) = 0 [pid 6212] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6194] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 124.022176][ T6195] BTRFS info (device loop0): balance: ended with status: 0 [pid 6195] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6195] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6195] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] <... ioctl resumed>) = 0 [pid 6212] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] close(3) = 0 [pid 6194] close(4) = 0 [pid 6194] close(5) = 0 [pid 6194] close(6) = -1 EBADF (Bad file descriptor) [pid 6194] close(7) = -1 EBADF (Bad file descriptor) [pid 6194] close(8) = -1 EBADF (Bad file descriptor) [pid 6194] close(9) = -1 EBADF (Bad file descriptor) [pid 6194] close(10) = -1 EBADF (Bad file descriptor) [pid 6194] close(11) = -1 EBADF (Bad file descriptor) [pid 6194] close(12) = -1 EBADF (Bad file descriptor) [pid 6194] close(13) = -1 EBADF (Bad file descriptor) [pid 6194] close(14) = -1 EBADF (Bad file descriptor) [pid 6194] close(15) = -1 EBADF (Bad file descriptor) [pid 6194] close(16) = -1 EBADF (Bad file descriptor) [pid 6194] close(17) = -1 EBADF (Bad file descriptor) [pid 6194] close(18) = -1 EBADF (Bad file descriptor) [pid 6194] close(19) = -1 EBADF (Bad file descriptor) [pid 6194] close(20) = -1 EBADF (Bad file descriptor) [pid 6194] close(21) = -1 EBADF (Bad file descriptor) [pid 6194] close(22) = -1 EBADF (Bad file descriptor) [pid 6194] close(23) = -1 EBADF (Bad file descriptor) [pid 6194] close(24) = -1 EBADF (Bad file descriptor) [pid 6194] close(25) = -1 EBADF (Bad file descriptor) [pid 6194] close(26) = -1 EBADF (Bad file descriptor) [pid 6194] close(27) = -1 EBADF (Bad file descriptor) [pid 6194] close(28) = -1 EBADF (Bad file descriptor) [pid 6194] close(29) = -1 EBADF (Bad file descriptor) [pid 6194] exit_group(0 [pid 6195] <... futex resumed>) = ? [pid 6212] <... futex resumed>) = ? [pid 6195] +++ exited with 0 +++ [pid 6212] +++ exited with 0 +++ [pid 6194] <... exit_group resumed>) = ? [pid 6194] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=185, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./61/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./61/cgroup.cpu") = 0 [pid 5007] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./61/binderfs") = 0 [pid 5007] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./61/file0") = 0 [pid 5007] umount2("./61/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./61/cgroup") = 0 [pid 5007] umount2("./61/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./61/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./61/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./61") = 0 [pid 5007] mkdir("./62", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6213 attached [pid 6213] set_robust_list(0x5555571235e0, 24) = 0 [pid 6213] chdir("./62" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 188 [pid 6213] <... chdir resumed>) = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6213] setpgid(0, 0) = 0 [pid 6213] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6213] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6213] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6213] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6214 attached , parent_tid=[189], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 189 [pid 6214] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6214] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6214] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] memfd_create("syzkaller", 0) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6214] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6214] close(3) = 0 [pid 6214] mkdir("./file0", 0777) = 0 [ 124.566511][ T6214] loop0: detected capacity change from 0 to 32768 [ 124.578459][ T6214] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6214) [ 124.594368][ T6214] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 124.603259][ T6214] BTRFS info (device loop0): using free space tree [pid 6214] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6214] chdir("./file0") = 0 [pid 6214] ioctl(4, LOOP_CLR_FD) = 0 [pid 6214] close(4) = 0 [pid 6214] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... openat resumed>) = 4 [pid 6214] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6213] <... futex resumed>) = 0 [ 124.623273][ T6214] BTRFS info (device loop0): enabling ssd optimizations [ 124.630633][ T6214] BTRFS info (device loop0): auto enabling async discard [pid 6213] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6213] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6213] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6231 attached [pid 6231] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6231] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... clone resumed>, parent_tid=[190], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 190 [pid 6213] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] <... futex resumed>) = 0 [pid 6231] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6231] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 124.671297][ T6214] BTRFS info (device loop0): balance: start -s [ 124.679588][ T6214] BTRFS info (device loop0): relocating block group 1048576 flags system [ 124.707446][ T6214] BTRFS info (device loop0): balance: ended with status: 0 [pid 6213] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6214] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6231] <... ioctl resumed>) = 0 [pid 6231] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] close(3 [pid 6231] <... futex resumed>) = 0 [pid 6231] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... close resumed>) = 0 [pid 6213] close(4) = 0 [pid 6213] close(5) = 0 [pid 6213] close(6) = -1 EBADF (Bad file descriptor) [pid 6213] close(7) = -1 EBADF (Bad file descriptor) [pid 6213] close(8) = -1 EBADF (Bad file descriptor) [pid 6213] close(9) = -1 EBADF (Bad file descriptor) [pid 6213] close(10) = -1 EBADF (Bad file descriptor) [pid 6213] close(11) = -1 EBADF (Bad file descriptor) [pid 6213] close(12) = -1 EBADF (Bad file descriptor) [pid 6213] close(13) = -1 EBADF (Bad file descriptor) [pid 6213] close(14) = -1 EBADF (Bad file descriptor) [pid 6213] close(15) = -1 EBADF (Bad file descriptor) [pid 6213] close(16) = -1 EBADF (Bad file descriptor) [pid 6213] close(17) = -1 EBADF (Bad file descriptor) [pid 6213] close(18) = -1 EBADF (Bad file descriptor) [pid 6213] close(19) = -1 EBADF (Bad file descriptor) [pid 6213] close(20) = -1 EBADF (Bad file descriptor) [pid 6213] close(21) = -1 EBADF (Bad file descriptor) [pid 6213] close(22) = -1 EBADF (Bad file descriptor) [pid 6213] close(23) = -1 EBADF (Bad file descriptor) [pid 6213] close(24) = -1 EBADF (Bad file descriptor) [pid 6213] close(25) = -1 EBADF (Bad file descriptor) [pid 6213] close(26) = -1 EBADF (Bad file descriptor) [pid 6213] close(27) = -1 EBADF (Bad file descriptor) [pid 6213] close(28) = -1 EBADF (Bad file descriptor) [pid 6213] close(29) = -1 EBADF (Bad file descriptor) [pid 6213] exit_group(0 [pid 6231] <... futex resumed>) = ? [pid 6214] <... futex resumed>) = ? [pid 6231] +++ exited with 0 +++ [pid 6213] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=188, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./62/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./62/cgroup.cpu") = 0 [pid 5007] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./62/binderfs") = 0 [pid 5007] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./62/file0") = 0 [pid 5007] umount2("./62/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./62/cgroup") = 0 [pid 5007] umount2("./62/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./62/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./62/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./62") = 0 [pid 5007] mkdir("./63", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 191 ./strace-static-x86_64: Process 6232 attached [pid 6232] set_robust_list(0x5555571235e0, 24) = 0 [pid 6232] chdir("./63") = 0 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] setpgid(0, 0) = 0 [pid 6232] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6232] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6232] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6232] write(3, "1000", 4) = 4 [pid 6232] close(3) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6232] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6232] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[192], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 192 [pid 6232] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6233 attached [pid 6233] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6233] memfd_create("syzkaller", 0) = 3 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6233] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6233] close(3) = 0 [pid 6233] mkdir("./file0", 0777) = 0 [ 125.232451][ T6233] loop0: detected capacity change from 0 to 32768 [ 125.243458][ T6233] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6233) [ 125.260928][ T6233] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 125.269776][ T6233] BTRFS info (device loop0): using free space tree [pid 6233] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6233] chdir("./file0") = 0 [pid 6233] ioctl(4, LOOP_CLR_FD) = 0 [pid 6233] close(4) = 0 [pid 6233] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6233] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.289492][ T6233] BTRFS info (device loop0): enabling ssd optimizations [ 125.296839][ T6233] BTRFS info (device loop0): auto enabling async discard [pid 6233] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6232] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6232] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[193], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 193 [pid 6232] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6250 attached [pid 6250] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6250] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6250] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 0 [pid 6232] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] <... futex resumed>) = 1 [ 125.346301][ T6233] BTRFS info (device loop0): balance: start -s [ 125.356794][ T6233] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6250] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6232] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6250] <... ioctl resumed>) = 0 [pid 6250] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6250] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6233] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] close(3) = 0 [pid 6232] close(4) = 0 [pid 6232] close(5) = 0 [pid 6232] close(6) = -1 EBADF (Bad file descriptor) [pid 6232] close(7) = -1 EBADF (Bad file descriptor) [pid 6232] close(8) = -1 EBADF (Bad file descriptor) [pid 6232] close(9) = -1 EBADF (Bad file descriptor) [pid 6232] close(10) = -1 EBADF (Bad file descriptor) [pid 6232] close(11) = -1 EBADF (Bad file descriptor) [pid 6232] close(12) = -1 EBADF (Bad file descriptor) [pid 6232] close(13) = -1 EBADF (Bad file descriptor) [pid 6232] close(14) = -1 EBADF (Bad file descriptor) [pid 6232] close(15) = -1 EBADF (Bad file descriptor) [pid 6232] close(16) = -1 EBADF (Bad file descriptor) [pid 6232] close(17) = -1 EBADF (Bad file descriptor) [pid 6232] close(18) = -1 EBADF (Bad file descriptor) [pid 6232] close(19) = -1 EBADF (Bad file descriptor) [pid 6232] close(20) = -1 EBADF (Bad file descriptor) [pid 6232] close(21) = -1 EBADF (Bad file descriptor) [pid 6232] close(22) = -1 EBADF (Bad file descriptor) [pid 6232] close(23) = -1 EBADF (Bad file descriptor) [pid 6232] close(24) = -1 EBADF (Bad file descriptor) [pid 6232] close(25) = -1 EBADF (Bad file descriptor) [pid 6232] close(26) = -1 EBADF (Bad file descriptor) [pid 6232] close(27) = -1 EBADF (Bad file descriptor) [pid 6232] close(28) = -1 EBADF (Bad file descriptor) [pid 6232] close(29) = -1 EBADF (Bad file descriptor) [pid 6232] exit_group(0 [pid 6250] <... futex resumed>) = ? [pid 6250] +++ exited with 0 +++ [pid 6232] <... exit_group resumed>) = ? [pid 6233] <... futex resumed>) = ? [pid 6233] +++ exited with 0 +++ [pid 6232] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=191, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./63/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./63/cgroup.cpu") = 0 [pid 5007] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./63/binderfs") = 0 [ 125.525804][ T6233] BTRFS info (device loop0): balance: ended with status: 0 [pid 5007] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./63/file0") = 0 [pid 5007] umount2("./63/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./63/cgroup") = 0 [pid 5007] umount2("./63/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./63/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./63/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./63") = 0 [pid 5007] mkdir("./64", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 194 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x5555571235e0, 24) = 0 [pid 6251] chdir("./64") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6251] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6251] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6251] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[195], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 195 [pid 6251] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6252 attached [pid 6252] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6252] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6252] close(3) = 0 [pid 6252] mkdir("./file0", 0777) = 0 [ 125.912854][ T6252] loop0: detected capacity change from 0 to 32768 [ 125.924010][ T6252] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6252) [ 125.942213][ T6252] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 125.951460][ T6252] BTRFS info (device loop0): using free space tree [pid 6252] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] chdir("./file0") = 0 [pid 6252] ioctl(4, LOOP_CLR_FD) = 0 [pid 6252] close(4) = 0 [pid 6252] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6251] <... futex resumed>) = 0 [pid 6252] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... futex resumed>) = 0 [pid 6251] <... futex resumed>) = 1 [pid 6252] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] <... futex resumed>) = 0 [pid 6252] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 125.971638][ T6252] BTRFS info (device loop0): enabling ssd optimizations [ 125.978813][ T6252] BTRFS info (device loop0): auto enabling async discard [pid 6251] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6251] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.022076][ T6252] BTRFS info (device loop0): balance: start -s [ 126.031222][ T6252] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6251] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[196], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 196 [pid 6251] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6269 attached [pid 6269] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6269] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6269] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... futex resumed>) = 0 [pid 6251] <... futex resumed>) = 1 [pid 6269] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6251] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6252] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.069461][ T6252] BTRFS info (device loop0): balance: ended with status: 0 [pid 6252] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6269] <... ioctl resumed>) = 0 [pid 6269] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6269] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] close(3) = 0 [pid 6251] close(4) = 0 [pid 6251] close(5) = 0 [pid 6251] close(6) = -1 EBADF (Bad file descriptor) [pid 6251] close(7) = -1 EBADF (Bad file descriptor) [pid 6251] close(8) = -1 EBADF (Bad file descriptor) [pid 6251] close(9) = -1 EBADF (Bad file descriptor) [pid 6251] close(10) = -1 EBADF (Bad file descriptor) [pid 6251] close(11) = -1 EBADF (Bad file descriptor) [pid 6251] close(12) = -1 EBADF (Bad file descriptor) [pid 6251] close(13) = -1 EBADF (Bad file descriptor) [pid 6251] close(14) = -1 EBADF (Bad file descriptor) [pid 6251] close(15) = -1 EBADF (Bad file descriptor) [pid 6251] close(16) = -1 EBADF (Bad file descriptor) [pid 6251] close(17) = -1 EBADF (Bad file descriptor) [pid 6251] close(18) = -1 EBADF (Bad file descriptor) [pid 6251] close(19) = -1 EBADF (Bad file descriptor) [pid 6251] close(20) = -1 EBADF (Bad file descriptor) [pid 6251] close(21) = -1 EBADF (Bad file descriptor) [pid 6251] close(22) = -1 EBADF (Bad file descriptor) [pid 6251] close(23) = -1 EBADF (Bad file descriptor) [pid 6251] close(24) = -1 EBADF (Bad file descriptor) [pid 6251] close(25) = -1 EBADF (Bad file descriptor) [pid 6251] close(26) = -1 EBADF (Bad file descriptor) [pid 6251] close(27) = -1 EBADF (Bad file descriptor) [pid 6251] close(28) = -1 EBADF (Bad file descriptor) [pid 6251] close(29) = -1 EBADF (Bad file descriptor) [pid 6251] exit_group(0 [pid 6269] <... futex resumed>) = ? [pid 6252] <... futex resumed>) = ? [pid 6251] <... exit_group resumed>) = ? [pid 6269] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=194, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./64/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./64/cgroup.cpu") = 0 [pid 5007] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./64/binderfs") = 0 [pid 5007] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./64/file0") = 0 [pid 5007] umount2("./64/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./64/cgroup") = 0 [pid 5007] umount2("./64/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./64/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./64/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./64") = 0 [pid 5007] mkdir("./65", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 197 ./strace-static-x86_64: Process 6270 attached [pid 6270] set_robust_list(0x5555571235e0, 24) = 0 [pid 6270] chdir("./65") = 0 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6270] setpgid(0, 0) = 0 [pid 6270] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6270] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6270] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6270] write(3, "1000", 4) = 4 [pid 6270] close(3) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6270] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6270] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[198], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 198 [pid 6270] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6271 attached [pid 6271] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6271] memfd_create("syzkaller", 0) = 3 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6271] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6271] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6271] close(3) = 0 [pid 6271] mkdir("./file0", 0777) = 0 [ 126.634994][ T6271] loop0: detected capacity change from 0 to 32768 [ 126.647387][ T6271] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6271) [ 126.664102][ T6271] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 126.673005][ T6271] BTRFS info (device loop0): using free space tree [pid 6271] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6271] chdir("./file0") = 0 [pid 6271] ioctl(4, LOOP_CLR_FD) = 0 [pid 6271] close(4) = 0 [pid 6271] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6270] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] <... openat resumed>) = 4 [pid 6271] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] <... futex resumed>) = 0 [pid 6271] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6270] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.693999][ T6271] BTRFS info (device loop0): enabling ssd optimizations [ 126.701254][ T6271] BTRFS info (device loop0): auto enabling async discard [pid 6270] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6270] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6270] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6270] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6288 attached [pid 6288] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6288] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... clone resumed>, parent_tid=[199], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 199 [pid 6270] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6288] <... futex resumed>) = 0 [pid 6288] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6288] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 6288] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6270] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.741160][ T6271] BTRFS info (device loop0): balance: start -s [ 126.749467][ T6271] BTRFS info (device loop0): relocating block group 1048576 flags system [ 126.777847][ T6271] BTRFS info (device loop0): balance: ended with status: 0 [pid 6270] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6271] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6271] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] <... ioctl resumed>) = 0 [pid 6288] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] close(3) = 0 [pid 6270] close(4) = 0 [pid 6270] close(5) = 0 [pid 6270] close(6) = -1 EBADF (Bad file descriptor) [pid 6270] close(7) = -1 EBADF (Bad file descriptor) [pid 6270] close(8) = -1 EBADF (Bad file descriptor) [pid 6270] close(9) = -1 EBADF (Bad file descriptor) [pid 6270] close(10) = -1 EBADF (Bad file descriptor) [pid 6270] close(11) = -1 EBADF (Bad file descriptor) [pid 6270] close(12) = -1 EBADF (Bad file descriptor) [pid 6270] close(13) = -1 EBADF (Bad file descriptor) [pid 6270] close(14) = -1 EBADF (Bad file descriptor) [pid 6270] close(15) = -1 EBADF (Bad file descriptor) [pid 6270] close(16) = -1 EBADF (Bad file descriptor) [pid 6270] close(17) = -1 EBADF (Bad file descriptor) [pid 6270] close(18) = -1 EBADF (Bad file descriptor) [pid 6270] close(19) = -1 EBADF (Bad file descriptor) [pid 6270] close(20) = -1 EBADF (Bad file descriptor) [pid 6270] close(21) = -1 EBADF (Bad file descriptor) [pid 6270] close(22) = -1 EBADF (Bad file descriptor) [pid 6270] close(23) = -1 EBADF (Bad file descriptor) [pid 6270] close(24) = -1 EBADF (Bad file descriptor) [pid 6270] close(25) = -1 EBADF (Bad file descriptor) [pid 6270] close(26) = -1 EBADF (Bad file descriptor) [pid 6270] close(27) = -1 EBADF (Bad file descriptor) [pid 6270] close(28) = -1 EBADF (Bad file descriptor) [pid 6270] close(29) = -1 EBADF (Bad file descriptor) [pid 6270] exit_group(0 [pid 6288] <... futex resumed>) = ? [pid 6288] +++ exited with 0 +++ [pid 6271] <... futex resumed>) = ? [pid 6270] <... exit_group resumed>) = ? [pid 6271] +++ exited with 0 +++ [pid 6270] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=197, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./65/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./65/cgroup.cpu") = 0 [pid 5007] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./65/binderfs") = 0 [pid 5007] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./65/file0") = 0 [pid 5007] umount2("./65/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./65/cgroup") = 0 [pid 5007] umount2("./65/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./65/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./65/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./65") = 0 [pid 5007] mkdir("./66", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 200 [pid 6289] <... set_robust_list resumed>) = 0 [pid 6289] chdir("./66") = 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6289] setpgid(0, 0) = 0 [pid 6289] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6289] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6289] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6289] write(3, "1000", 4) = 4 [pid 6289] close(3) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6289] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6289] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6290 attached [pid 6290] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6290] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... clone resumed>, parent_tid=[201], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 201 [pid 6289] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6290] memfd_create("syzkaller", 0 [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6290] <... memfd_create resumed>) = 3 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6290] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6290] close(3) = 0 [pid 6290] mkdir("./file0", 0777) = 0 [ 127.309873][ T6290] loop0: detected capacity change from 0 to 32768 [ 127.321162][ T6290] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6290) [ 127.339152][ T6290] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 127.348002][ T6290] BTRFS info (device loop0): using free space tree [pid 6290] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6290] chdir("./file0") = 0 [pid 6290] ioctl(4, LOOP_CLR_FD) = 0 [pid 6290] close(4) = 0 [pid 6290] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6290] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6289] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... openat resumed>) = 4 [pid 6290] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6290] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6289] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 127.368547][ T6290] BTRFS info (device loop0): enabling ssd optimizations [ 127.375809][ T6290] BTRFS info (device loop0): auto enabling async discard [pid 6289] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6289] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6289] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6289] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6307 attached [pid 6307] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6307] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... clone resumed>, parent_tid=[202], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 202 [pid 6289] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6307] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6289] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6307] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 127.432302][ T6290] BTRFS info (device loop0): balance: start -s [ 127.440809][ T6290] BTRFS info (device loop0): relocating block group 1048576 flags system [ 127.470430][ T6290] BTRFS info (device loop0): balance: ended with status: 0 [pid 6289] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6290] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6307] <... ioctl resumed>) = 0 [pid 6307] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] close(3 [pid 6307] <... futex resumed>) = 0 [pid 6307] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... close resumed>) = 0 [pid 6289] close(4) = 0 [pid 6289] close(5) = 0 [pid 6289] close(6) = -1 EBADF (Bad file descriptor) [pid 6289] close(7) = -1 EBADF (Bad file descriptor) [pid 6289] close(8) = -1 EBADF (Bad file descriptor) [pid 6289] close(9) = -1 EBADF (Bad file descriptor) [pid 6289] close(10) = -1 EBADF (Bad file descriptor) [pid 6289] close(11) = -1 EBADF (Bad file descriptor) [pid 6289] close(12) = -1 EBADF (Bad file descriptor) [pid 6289] close(13) = -1 EBADF (Bad file descriptor) [pid 6289] close(14) = -1 EBADF (Bad file descriptor) [pid 6289] close(15) = -1 EBADF (Bad file descriptor) [pid 6289] close(16) = -1 EBADF (Bad file descriptor) [pid 6289] close(17) = -1 EBADF (Bad file descriptor) [pid 6289] close(18) = -1 EBADF (Bad file descriptor) [pid 6289] close(19) = -1 EBADF (Bad file descriptor) [pid 6289] close(20) = -1 EBADF (Bad file descriptor) [pid 6289] close(21) = -1 EBADF (Bad file descriptor) [pid 6289] close(22) = -1 EBADF (Bad file descriptor) [pid 6289] close(23) = -1 EBADF (Bad file descriptor) [pid 6289] close(24) = -1 EBADF (Bad file descriptor) [pid 6289] close(25) = -1 EBADF (Bad file descriptor) [pid 6289] close(26) = -1 EBADF (Bad file descriptor) [pid 6289] close(27) = -1 EBADF (Bad file descriptor) [pid 6289] close(28) = -1 EBADF (Bad file descriptor) [pid 6289] close(29) = -1 EBADF (Bad file descriptor) [pid 6289] exit_group(0 [pid 6290] <... futex resumed>) = ? [pid 6289] <... exit_group resumed>) = ? [pid 6307] <... futex resumed>) = ? [pid 6290] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ [pid 6289] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=200, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./66/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./66/cgroup.cpu") = 0 [pid 5007] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./66/binderfs") = 0 [pid 5007] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./66/file0") = 0 [pid 5007] umount2("./66/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./66/cgroup") = 0 [pid 5007] umount2("./66/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./66/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./66/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./66") = 0 [pid 5007] mkdir("./67", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6308 attached , child_tidptr=0x5555571235d0) = 203 [pid 6308] set_robust_list(0x5555571235e0, 24) = 0 [pid 6308] chdir("./67") = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6308] setpgid(0, 0) = 0 [pid 6308] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6308] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6308] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6308] write(3, "1000", 4) = 4 [pid 6308] close(3) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6308] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6309 attached , parent_tid=[204], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 204 [pid 6309] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6308] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6309] memfd_create("syzkaller", 0) = 3 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6309] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6309] close(3) = 0 [pid 6309] mkdir("./file0", 0777) = 0 [ 127.998082][ T6309] loop0: detected capacity change from 0 to 32768 [ 128.010024][ T6309] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6309) [ 128.025908][ T6309] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.034651][ T6309] BTRFS info (device loop0): using free space tree [pid 6309] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6309] chdir("./file0") = 0 [pid 6309] ioctl(4, LOOP_CLR_FD) = 0 [pid 6309] close(4) = 0 [pid 6309] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6309] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6309] <... futex resumed>) = 1 [ 128.053756][ T6309] BTRFS info (device loop0): enabling ssd optimizations [ 128.061063][ T6309] BTRFS info (device loop0): auto enabling async discard [pid 6309] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6308] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6308] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[205], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 205 [pid 6308] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.106151][ T6309] BTRFS info (device loop0): balance: start -s [ 128.114406][ T6309] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6308] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6326 attached [pid 6326] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6326] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6326] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 1 [pid 6326] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6309] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6309] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.152465][ T6309] BTRFS info (device loop0): balance: ended with status: 0 [pid 6309] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6326] <... ioctl resumed>) = 0 [pid 6326] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] close(3 [pid 6326] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] <... close resumed>) = 0 [pid 6308] close(4) = 0 [pid 6308] close(5) = 0 [pid 6308] close(6) = -1 EBADF (Bad file descriptor) [pid 6308] close(7) = -1 EBADF (Bad file descriptor) [pid 6308] close(8) = -1 EBADF (Bad file descriptor) [pid 6308] close(9) = -1 EBADF (Bad file descriptor) [pid 6308] close(10) = -1 EBADF (Bad file descriptor) [pid 6308] close(11) = -1 EBADF (Bad file descriptor) [pid 6308] close(12) = -1 EBADF (Bad file descriptor) [pid 6308] close(13) = -1 EBADF (Bad file descriptor) [pid 6308] close(14) = -1 EBADF (Bad file descriptor) [pid 6308] close(15) = -1 EBADF (Bad file descriptor) [pid 6308] close(16) = -1 EBADF (Bad file descriptor) [pid 6308] close(17) = -1 EBADF (Bad file descriptor) [pid 6308] close(18) = -1 EBADF (Bad file descriptor) [pid 6308] close(19) = -1 EBADF (Bad file descriptor) [pid 6308] close(20) = -1 EBADF (Bad file descriptor) [pid 6308] close(21) = -1 EBADF (Bad file descriptor) [pid 6308] close(22) = -1 EBADF (Bad file descriptor) [pid 6308] close(23) = -1 EBADF (Bad file descriptor) [pid 6308] close(24) = -1 EBADF (Bad file descriptor) [pid 6308] close(25) = -1 EBADF (Bad file descriptor) [pid 6308] close(26) = -1 EBADF (Bad file descriptor) [pid 6308] close(27) = -1 EBADF (Bad file descriptor) [pid 6308] close(28) = -1 EBADF (Bad file descriptor) [pid 6308] close(29) = -1 EBADF (Bad file descriptor) [pid 6308] exit_group(0 [pid 6326] <... futex resumed>) = ? [pid 6309] <... futex resumed>) = ? [pid 6308] <... exit_group resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 6326] +++ exited with 0 +++ [pid 6308] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=203, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./67/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./67/cgroup.cpu") = 0 [pid 5007] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./67/binderfs") = 0 [pid 5007] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./67/file0") = 0 [pid 5007] umount2("./67/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./67/cgroup") = 0 [pid 5007] umount2("./67/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./67/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./67/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./67") = 0 [pid 5007] mkdir("./68", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6327 attached , child_tidptr=0x5555571235d0) = 206 [pid 6327] set_robust_list(0x5555571235e0, 24) = 0 [pid 6327] chdir("./68") = 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6327] setpgid(0, 0) = 0 [pid 6327] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6327] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6327] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6327] write(3, "1000", 4) = 4 [pid 6327] close(3) = 0 [pid 6327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6327] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6327] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[207], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 207 [pid 6327] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6328 attached [pid 6328] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6328] memfd_create("syzkaller", 0) = 3 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6328] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6328] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6328] close(3) = 0 [pid 6328] mkdir("./file0", 0777) = 0 [ 128.690640][ T6328] loop0: detected capacity change from 0 to 32768 [ 128.701564][ T6328] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6328) [ 128.718466][ T6328] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.727312][ T6328] BTRFS info (device loop0): using free space tree [pid 6328] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6328] chdir("./file0") = 0 [pid 6328] ioctl(4, LOOP_CLR_FD) = 0 [pid 6328] close(4) = 0 [pid 6328] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] <... futex resumed>) = 0 [pid 6328] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6327] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... openat resumed>) = 4 [pid 6327] <... futex resumed>) = 0 [pid 6328] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6328] <... futex resumed>) = 0 [pid 6327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6328] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6327] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 128.748879][ T6328] BTRFS info (device loop0): enabling ssd optimizations [ 128.756089][ T6328] BTRFS info (device loop0): auto enabling async discard [pid 6327] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6327] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6327] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6327] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6345 attached [pid 6345] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6327] <... clone resumed>, parent_tid=[208], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 208 [pid 6345] openat(AT_FDCWD, ".", O_RDONLY [pid 6327] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6345] <... openat resumed>) = 5 [pid 6345] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] <... futex resumed>) = 0 [pid 6327] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 128.805652][ T6328] BTRFS info (device loop0): balance: start -s [ 128.814008][ T6328] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6345] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 128.892611][ T6328] BTRFS info (device loop0): balance: ended with status: 0 [pid 6345] <... ioctl resumed>) = 0 [pid 6345] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6345] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6327] close(3) = 0 [pid 6327] close(4) = 0 [pid 6327] close(5) = 0 [pid 6327] close(6) = -1 EBADF (Bad file descriptor) [pid 6327] close(7) = -1 EBADF (Bad file descriptor) [pid 6327] close(8) = -1 EBADF (Bad file descriptor) [pid 6327] close(9) = -1 EBADF (Bad file descriptor) [pid 6327] close(10) = -1 EBADF (Bad file descriptor) [pid 6327] close(11) = -1 EBADF (Bad file descriptor) [pid 6327] close(12) = -1 EBADF (Bad file descriptor) [pid 6327] close(13) = -1 EBADF (Bad file descriptor) [pid 6327] close(14) = -1 EBADF (Bad file descriptor) [pid 6327] close(15) = -1 EBADF (Bad file descriptor) [pid 6327] close(16) = -1 EBADF (Bad file descriptor) [pid 6327] close(17) = -1 EBADF (Bad file descriptor) [pid 6327] close(18) = -1 EBADF (Bad file descriptor) [pid 6327] close(19) = -1 EBADF (Bad file descriptor) [pid 6327] close(20) = -1 EBADF (Bad file descriptor) [pid 6327] close(21) = -1 EBADF (Bad file descriptor) [pid 6327] close(22) = -1 EBADF (Bad file descriptor) [pid 6327] close(23) = -1 EBADF (Bad file descriptor) [pid 6327] close(24) = -1 EBADF (Bad file descriptor) [pid 6327] close(25) = -1 EBADF (Bad file descriptor) [pid 6327] close(26) = -1 EBADF (Bad file descriptor) [pid 6327] close(27) = -1 EBADF (Bad file descriptor) [pid 6327] close(28) = -1 EBADF (Bad file descriptor) [pid 6327] close(29) = -1 EBADF (Bad file descriptor) [pid 6327] exit_group(0 [pid 6345] <... futex resumed>) = ? [pid 6328] <... futex resumed>) = ? [pid 6327] <... exit_group resumed>) = ? [pid 6345] +++ exited with 0 +++ [pid 6328] +++ exited with 0 +++ [pid 6327] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=206, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./68/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./68/cgroup.cpu") = 0 [pid 5007] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./68/binderfs") = 0 [pid 5007] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./68/file0") = 0 [pid 5007] umount2("./68/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./68/cgroup") = 0 [pid 5007] umount2("./68/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./68/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./68/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./68") = 0 [pid 5007] mkdir("./69", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 209 ./strace-static-x86_64: Process 6346 attached [pid 6346] set_robust_list(0x5555571235e0, 24) = 0 [pid 6346] chdir("./69") = 0 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6346] setpgid(0, 0) = 0 [pid 6346] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6346] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6346] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6346] write(3, "1000", 4) = 4 [pid 6346] close(3) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6346] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6346] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[210], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 210 ./strace-static-x86_64: Process 6347 attached [pid 6347] set_robust_list(0x7fd090fc79e0, 24 [pid 6346] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] <... set_robust_list resumed>) = 0 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6347] memfd_create("syzkaller", 0) = 3 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6347] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6347] close(3) = 0 [pid 6347] mkdir("./file0", 0777) = 0 [ 129.380579][ T6347] loop0: detected capacity change from 0 to 32768 [ 129.392199][ T6347] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6347) [ 129.409808][ T6347] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.418896][ T6347] BTRFS info (device loop0): using free space tree [pid 6347] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6347] chdir("./file0") = 0 [pid 6347] ioctl(4, LOOP_CLR_FD) = 0 [pid 6347] close(4) = 0 [pid 6347] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [pid 6347] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6347] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 1 [ 129.439929][ T6347] BTRFS info (device loop0): enabling ssd optimizations [ 129.447128][ T6347] BTRFS info (device loop0): auto enabling async discard [pid 6347] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6346] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6346] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6346] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6364 attached [pid 6364] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6364] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] <... clone resumed>, parent_tid=[211], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 211 [pid 6346] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6346] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... futex resumed>) = 0 [pid 6364] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6364] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6346] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... futex resumed>) = 1 [ 129.484614][ T6347] BTRFS info (device loop0): balance: start -s [ 129.493552][ T6347] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6364] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 129.569243][ T6347] BTRFS info (device loop0): balance: ended with status: 0 [pid 6364] <... ioctl resumed>) = 0 [pid 6347] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6364] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6364] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6347] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] close(3) = 0 [pid 6346] close(4) = 0 [pid 6346] close(5) = 0 [pid 6346] close(6) = -1 EBADF (Bad file descriptor) [pid 6346] close(7) = -1 EBADF (Bad file descriptor) [pid 6346] close(8) = -1 EBADF (Bad file descriptor) [pid 6346] close(9) = -1 EBADF (Bad file descriptor) [pid 6346] close(10) = -1 EBADF (Bad file descriptor) [pid 6346] close(11) = -1 EBADF (Bad file descriptor) [pid 6346] close(12) = -1 EBADF (Bad file descriptor) [pid 6346] close(13) = -1 EBADF (Bad file descriptor) [pid 6346] close(14) = -1 EBADF (Bad file descriptor) [pid 6346] close(15) = -1 EBADF (Bad file descriptor) [pid 6346] close(16) = -1 EBADF (Bad file descriptor) [pid 6346] close(17) = -1 EBADF (Bad file descriptor) [pid 6346] close(18) = -1 EBADF (Bad file descriptor) [pid 6346] close(19) = -1 EBADF (Bad file descriptor) [pid 6346] close(20) = -1 EBADF (Bad file descriptor) [pid 6346] close(21) = -1 EBADF (Bad file descriptor) [pid 6346] close(22) = -1 EBADF (Bad file descriptor) [pid 6346] close(23) = -1 EBADF (Bad file descriptor) [pid 6346] close(24) = -1 EBADF (Bad file descriptor) [pid 6346] close(25) = -1 EBADF (Bad file descriptor) [pid 6346] close(26) = -1 EBADF (Bad file descriptor) [pid 6346] close(27) = -1 EBADF (Bad file descriptor) [pid 6346] close(28) = -1 EBADF (Bad file descriptor) [pid 6346] close(29) = -1 EBADF (Bad file descriptor) [pid 6346] exit_group(0 [pid 6364] <... futex resumed>) = ? [pid 6347] <... futex resumed>) = ? [pid 6346] <... exit_group resumed>) = ? [pid 6364] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 6346] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=209, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./69/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./69/cgroup.cpu") = 0 [pid 5007] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./69/binderfs") = 0 [pid 5007] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./69/file0") = 0 [pid 5007] umount2("./69/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./69/cgroup") = 0 [pid 5007] umount2("./69/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./69/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./69/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./69") = 0 [pid 5007] mkdir("./70", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 212 ./strace-static-x86_64: Process 6365 attached [pid 6365] set_robust_list(0x5555571235e0, 24) = 0 [pid 6365] chdir("./70") = 0 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6365] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6365] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6365] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4) = 4 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6365] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6366 attached [pid 6366] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6366] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... clone resumed>, parent_tid=[213], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 213 [pid 6365] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] <... futex resumed>) = 0 [pid 6365] <... futex resumed>) = 1 [pid 6366] memfd_create("syzkaller", 0 [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6366] <... memfd_create resumed>) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6366] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6366] close(3) = 0 [pid 6366] mkdir("./file0", 0777) = 0 [ 130.053137][ T6366] loop0: detected capacity change from 0 to 32768 [ 130.064477][ T6366] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6366) [ 130.081249][ T6366] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 130.090114][ T6366] BTRFS info (device loop0): using free space tree [pid 6366] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6366] chdir("./file0") = 0 [pid 6366] ioctl(4, LOOP_CLR_FD) = 0 [pid 6366] close(4) = 0 [pid 6366] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] <... futex resumed>) = 0 [pid 6366] <... futex resumed>) = 1 [pid 6366] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6365] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... openat resumed>) = 4 [pid 6366] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6366] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6365] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 130.109387][ T6366] BTRFS info (device loop0): enabling ssd optimizations [ 130.116478][ T6366] BTRFS info (device loop0): auto enabling async discard [ 130.169300][ T6366] BTRFS info (device loop0): balance: start -s [ 130.178141][ T6366] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6365] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6365] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6383 attached [pid 6383] set_robust_list(0x7fd089ba69e0, 24 [pid 6365] <... clone resumed>, parent_tid=[214], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 214 [pid 6383] <... set_robust_list resumed>) = 0 [pid 6365] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] openat(AT_FDCWD, ".", O_RDONLY [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... openat resumed>) = 5 [pid 6383] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6383] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6365] <... futex resumed>) = 0 [pid 6383] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6366] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 130.209643][ T6366] BTRFS info (device loop0): balance: ended with status: 0 [pid 6366] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6383] <... ioctl resumed>) = 0 [pid 6383] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] close(3 [pid 6383] <... futex resumed>) = 0 [pid 6383] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] <... close resumed>) = 0 [pid 6365] close(4) = 0 [pid 6365] close(5) = 0 [pid 6365] close(6) = -1 EBADF (Bad file descriptor) [pid 6365] close(7) = -1 EBADF (Bad file descriptor) [pid 6365] close(8) = -1 EBADF (Bad file descriptor) [pid 6365] close(9) = -1 EBADF (Bad file descriptor) [pid 6365] close(10) = -1 EBADF (Bad file descriptor) [pid 6365] close(11) = -1 EBADF (Bad file descriptor) [pid 6365] close(12) = -1 EBADF (Bad file descriptor) [pid 6365] close(13) = -1 EBADF (Bad file descriptor) [pid 6365] close(14) = -1 EBADF (Bad file descriptor) [pid 6365] close(15) = -1 EBADF (Bad file descriptor) [pid 6365] close(16) = -1 EBADF (Bad file descriptor) [pid 6365] close(17) = -1 EBADF (Bad file descriptor) [pid 6365] close(18) = -1 EBADF (Bad file descriptor) [pid 6365] close(19) = -1 EBADF (Bad file descriptor) [pid 6365] close(20) = -1 EBADF (Bad file descriptor) [pid 6365] close(21) = -1 EBADF (Bad file descriptor) [pid 6365] close(22) = -1 EBADF (Bad file descriptor) [pid 6365] close(23) = -1 EBADF (Bad file descriptor) [pid 6365] close(24) = -1 EBADF (Bad file descriptor) [pid 6365] close(25) = -1 EBADF (Bad file descriptor) [pid 6365] close(26) = -1 EBADF (Bad file descriptor) [pid 6365] close(27) = -1 EBADF (Bad file descriptor) [pid 6365] close(28) = -1 EBADF (Bad file descriptor) [pid 6365] close(29) = -1 EBADF (Bad file descriptor) [pid 6365] exit_group(0 [pid 6383] <... futex resumed>) = ? [pid 6366] <... futex resumed>) = ? [pid 6365] <... exit_group resumed>) = ? [pid 6383] +++ exited with 0 +++ [pid 6366] +++ exited with 0 +++ [pid 6365] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=212, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./70/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./70/cgroup.cpu") = 0 [pid 5007] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./70/binderfs") = 0 [pid 5007] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./70/file0") = 0 [pid 5007] umount2("./70/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./70/cgroup") = 0 [pid 5007] umount2("./70/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./70/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./70/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./70") = 0 [pid 5007] mkdir("./71", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 215 ./strace-static-x86_64: Process 6384 attached [pid 6384] set_robust_list(0x5555571235e0, 24) = 0 [pid 6384] chdir("./71") = 0 [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6384] setpgid(0, 0) = 0 [pid 6384] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6384] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6384] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6384] write(3, "1000", 4) = 4 [pid 6384] close(3) = 0 [pid 6384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6384] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6384] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[216], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 216 [pid 6384] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6385 attached [pid 6385] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6385] memfd_create("syzkaller", 0) = 3 [pid 6385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6385] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6385] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6385] close(3) = 0 [pid 6385] mkdir("./file0", 0777) = 0 [ 130.716562][ T6385] loop0: detected capacity change from 0 to 32768 [ 130.727931][ T6385] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6385) [ 130.745498][ T6385] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 130.754319][ T6385] BTRFS info (device loop0): using free space tree [pid 6385] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6385] chdir("./file0") = 0 [pid 6385] ioctl(4, LOOP_CLR_FD) = 0 [pid 6385] close(4) = 0 [pid 6385] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = 0 [pid 6384] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6385] <... futex resumed>) = 1 [pid 6385] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6385] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 0 [pid 6384] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6384] <... futex resumed>) = 0 [ 130.774290][ T6385] BTRFS info (device loop0): enabling ssd optimizations [ 130.781507][ T6385] BTRFS info (device loop0): auto enabling async discard [pid 6384] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6384] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6384] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6384] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6402 attached [pid 6402] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6402] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... clone resumed>, parent_tid=[217], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 217 [pid 6384] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6402] <... futex resumed>) = 0 [pid 6384] <... futex resumed>) = 1 [pid 6402] openat(AT_FDCWD, ".", O_RDONLY [pid 6384] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6402] <... openat resumed>) = 5 [pid 6402] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6402] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6384] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6402] <... futex resumed>) = 0 [pid 6384] <... futex resumed>) = 1 [pid 6402] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 130.837769][ T6385] BTRFS info (device loop0): balance: start -s [ 130.847286][ T6385] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6384] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 130.890060][ T6385] BTRFS info (device loop0): balance: ended with status: 0 [pid 6402] <... ioctl resumed>) = 0 [pid 6402] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6402] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6385] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] close(3) = 0 [pid 6384] close(4) = 0 [pid 6384] close(5) = 0 [pid 6384] close(6) = -1 EBADF (Bad file descriptor) [pid 6384] close(7) = -1 EBADF (Bad file descriptor) [pid 6384] close(8) = -1 EBADF (Bad file descriptor) [pid 6384] close(9) = -1 EBADF (Bad file descriptor) [pid 6384] close(10) = -1 EBADF (Bad file descriptor) [pid 6384] close(11) = -1 EBADF (Bad file descriptor) [pid 6384] close(12) = -1 EBADF (Bad file descriptor) [pid 6384] close(13) = -1 EBADF (Bad file descriptor) [pid 6384] close(14) = -1 EBADF (Bad file descriptor) [pid 6384] close(15) = -1 EBADF (Bad file descriptor) [pid 6384] close(16) = -1 EBADF (Bad file descriptor) [pid 6384] close(17) = -1 EBADF (Bad file descriptor) [pid 6384] close(18) = -1 EBADF (Bad file descriptor) [pid 6384] close(19) = -1 EBADF (Bad file descriptor) [pid 6384] close(20) = -1 EBADF (Bad file descriptor) [pid 6384] close(21) = -1 EBADF (Bad file descriptor) [pid 6384] close(22) = -1 EBADF (Bad file descriptor) [pid 6384] close(23) = -1 EBADF (Bad file descriptor) [pid 6384] close(24) = -1 EBADF (Bad file descriptor) [pid 6384] close(25) = -1 EBADF (Bad file descriptor) [pid 6384] close(26) = -1 EBADF (Bad file descriptor) [pid 6384] close(27) = -1 EBADF (Bad file descriptor) [pid 6384] close(28) = -1 EBADF (Bad file descriptor) [pid 6384] close(29) = -1 EBADF (Bad file descriptor) [pid 6384] exit_group(0 [pid 6402] <... futex resumed>) = ? [pid 6385] <... futex resumed>) = ? [pid 6384] <... exit_group resumed>) = ? [pid 6402] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ [pid 6384] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=215, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./71/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./71/cgroup.cpu") = 0 [pid 5007] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./71/binderfs") = 0 [pid 5007] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./71/file0") = 0 [pid 5007] umount2("./71/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./71/cgroup") = 0 [pid 5007] umount2("./71/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./71/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./71/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./71") = 0 [pid 5007] mkdir("./72", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 218 ./strace-static-x86_64: Process 6403 attached [pid 6403] set_robust_list(0x5555571235e0, 24) = 0 [pid 6403] chdir("./72") = 0 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6403] setpgid(0, 0) = 0 [pid 6403] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6403] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6403] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6403] write(3, "1000", 4) = 4 [pid 6403] close(3) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6403] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6404 attached [pid 6404] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6404] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... clone resumed>, parent_tid=[219], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 219 [pid 6403] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = 0 [pid 6403] <... futex resumed>) = 1 [pid 6404] memfd_create("syzkaller", 0 [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6404] <... memfd_create resumed>) = 3 [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6404] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6404] close(3) = 0 [pid 6404] mkdir("./file0", 0777) = 0 [ 131.388145][ T6404] loop0: detected capacity change from 0 to 32768 [ 131.399513][ T6404] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6404) [ 131.416150][ T6404] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 131.424905][ T6404] BTRFS info (device loop0): using free space tree [pid 6404] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6404] chdir("./file0") = 0 [pid 6404] ioctl(4, LOOP_CLR_FD) = 0 [pid 6404] close(4) = 0 [pid 6404] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6404] <... openat resumed>) = 4 [pid 6404] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... futex resumed>) = 0 [pid 6404] <... futex resumed>) = 1 [pid 6403] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6403] <... futex resumed>) = 0 [ 131.445087][ T6404] BTRFS info (device loop0): enabling ssd optimizations [ 131.452101][ T6404] BTRFS info (device loop0): auto enabling async discard [pid 6403] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6403] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6403] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6403] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6421 attached [pid 6421] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6421] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... clone resumed>, parent_tid=[220], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 220 [pid 6403] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6421] <... futex resumed>) = 0 [pid 6421] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6403] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6421] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6403] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6421] <... futex resumed>) = 0 [pid 6403] <... futex resumed>) = 1 [pid 6421] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 131.508029][ T6404] BTRFS info (device loop0): balance: start -s [ 131.517465][ T6404] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6403] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 131.564469][ T6404] BTRFS info (device loop0): balance: ended with status: 0 [pid 6404] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6404] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] <... ioctl resumed>) = 0 [pid 6421] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] close(3) = 0 [pid 6403] close(4) = 0 [pid 6403] close(5) = 0 [pid 6403] close(6) = -1 EBADF (Bad file descriptor) [pid 6403] close(7) = -1 EBADF (Bad file descriptor) [pid 6403] close(8) = -1 EBADF (Bad file descriptor) [pid 6403] close(9) = -1 EBADF (Bad file descriptor) [pid 6403] close(10) = -1 EBADF (Bad file descriptor) [pid 6403] close(11) = -1 EBADF (Bad file descriptor) [pid 6403] close(12) = -1 EBADF (Bad file descriptor) [pid 6403] close(13) = -1 EBADF (Bad file descriptor) [pid 6403] close(14) = -1 EBADF (Bad file descriptor) [pid 6403] close(15) = -1 EBADF (Bad file descriptor) [pid 6403] close(16) = -1 EBADF (Bad file descriptor) [pid 6403] close(17) = -1 EBADF (Bad file descriptor) [pid 6403] close(18) = -1 EBADF (Bad file descriptor) [pid 6403] close(19) = -1 EBADF (Bad file descriptor) [pid 6403] close(20) = -1 EBADF (Bad file descriptor) [pid 6403] close(21) = -1 EBADF (Bad file descriptor) [pid 6403] close(22) = -1 EBADF (Bad file descriptor) [pid 6403] close(23) = -1 EBADF (Bad file descriptor) [pid 6403] close(24) = -1 EBADF (Bad file descriptor) [pid 6403] close(25) = -1 EBADF (Bad file descriptor) [pid 6403] close(26) = -1 EBADF (Bad file descriptor) [pid 6403] close(27) = -1 EBADF (Bad file descriptor) [pid 6403] close(28) = -1 EBADF (Bad file descriptor) [pid 6403] close(29) = -1 EBADF (Bad file descriptor) [pid 6403] exit_group(0 [pid 6404] <... futex resumed>) = ? [pid 6421] <... futex resumed>) = ? [pid 6403] <... exit_group resumed>) = ? [pid 6404] +++ exited with 0 +++ [pid 6421] +++ exited with 0 +++ [pid 6403] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=218, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./72/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./72/cgroup.cpu") = 0 [pid 5007] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./72/binderfs") = 0 [pid 5007] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./72/file0") = 0 [pid 5007] umount2("./72/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./72/cgroup") = 0 [pid 5007] umount2("./72/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./72/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./72/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./72") = 0 [pid 5007] mkdir("./73", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6422 attached [pid 6422] set_robust_list(0x5555571235e0, 24) = 0 [pid 6422] chdir("./73") = 0 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6422] setpgid(0, 0) = 0 [pid 6422] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 221 [pid 6422] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6422] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6422] write(3, "1000", 4) = 4 [pid 6422] close(3) = 0 [pid 6422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6422] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[222], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 222 ./strace-static-x86_64: Process 6423 attached [pid 6423] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6423] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6423] <... futex resumed>) = 0 [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6423] memfd_create("syzkaller", 0) = 3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6423] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6423] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6423] close(3) = 0 [pid 6423] mkdir("./file0", 0777) = 0 [ 132.103043][ T6423] loop0: detected capacity change from 0 to 32768 [ 132.112795][ T6423] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6423) [ 132.129308][ T6423] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.138119][ T6423] BTRFS info (device loop0): using free space tree [pid 6423] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6423] chdir("./file0") = 0 [pid 6423] ioctl(4, LOOP_CLR_FD) = 0 [pid 6423] close(4) = 0 [pid 6423] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6423] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6423] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6423] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6423] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6422] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.158849][ T6423] BTRFS info (device loop0): enabling ssd optimizations [ 132.166045][ T6423] BTRFS info (device loop0): auto enabling async discard [pid 6422] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6422] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6422] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6440 attached , parent_tid=[223], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 223 [pid 6422] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6440] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6440] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6422] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 132.212977][ T6423] BTRFS info (device loop0): balance: start -s [ 132.221359][ T6423] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6440] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6423] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6423] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.277064][ T6423] BTRFS info (device loop0): balance: ended with status: 0 [pid 6423] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] <... ioctl resumed>) = 0 [pid 6440] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] close(3 [pid 6440] <... futex resumed>) = 0 [pid 6422] <... close resumed>) = 0 [pid 6422] close(4) = 0 [pid 6440] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] close(5) = 0 [pid 6422] close(6) = -1 EBADF (Bad file descriptor) [pid 6422] close(7) = -1 EBADF (Bad file descriptor) [pid 6422] close(8) = -1 EBADF (Bad file descriptor) [pid 6422] close(9) = -1 EBADF (Bad file descriptor) [pid 6422] close(10) = -1 EBADF (Bad file descriptor) [pid 6422] close(11) = -1 EBADF (Bad file descriptor) [pid 6422] close(12) = -1 EBADF (Bad file descriptor) [pid 6422] close(13) = -1 EBADF (Bad file descriptor) [pid 6422] close(14) = -1 EBADF (Bad file descriptor) [pid 6422] close(15) = -1 EBADF (Bad file descriptor) [pid 6422] close(16) = -1 EBADF (Bad file descriptor) [pid 6422] close(17) = -1 EBADF (Bad file descriptor) [pid 6422] close(18) = -1 EBADF (Bad file descriptor) [pid 6422] close(19) = -1 EBADF (Bad file descriptor) [pid 6422] close(20) = -1 EBADF (Bad file descriptor) [pid 6422] close(21) = -1 EBADF (Bad file descriptor) [pid 6422] close(22) = -1 EBADF (Bad file descriptor) [pid 6422] close(23) = -1 EBADF (Bad file descriptor) [pid 6422] close(24) = -1 EBADF (Bad file descriptor) [pid 6422] close(25) = -1 EBADF (Bad file descriptor) [pid 6422] close(26) = -1 EBADF (Bad file descriptor) [pid 6422] close(27) = -1 EBADF (Bad file descriptor) [pid 6422] close(28) = -1 EBADF (Bad file descriptor) [pid 6422] close(29) = -1 EBADF (Bad file descriptor) [pid 6422] exit_group(0 [pid 6440] <... futex resumed>) = ? [pid 6423] <... futex resumed>) = ? [pid 6422] <... exit_group resumed>) = ? [pid 6440] +++ exited with 0 +++ [pid 6423] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=221, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./73/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./73/cgroup.cpu") = 0 [pid 5007] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./73/binderfs") = 0 [pid 5007] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./73/file0") = 0 [pid 5007] umount2("./73/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./73/cgroup") = 0 [pid 5007] umount2("./73/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./73/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./73/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./73") = 0 [pid 5007] mkdir("./74", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 224 ./strace-static-x86_64: Process 6441 attached [pid 6441] set_robust_list(0x5555571235e0, 24) = 0 [pid 6441] chdir("./74") = 0 [pid 6441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6441] setpgid(0, 0) = 0 [pid 6441] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6441] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6441] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6441] write(3, "1000", 4) = 4 [pid 6441] close(3) = 0 [pid 6441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6441] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6441] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6442 attached [pid 6442] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] <... clone resumed>, parent_tid=[225], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 225 [pid 6441] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 6441] <... futex resumed>) = 1 [pid 6442] memfd_create("syzkaller", 0) = 3 [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6442] <... mmap resumed>) = 0x7fd088ba7000 [pid 6442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6442] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6442] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6442] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6442] close(3) = 0 [pid 6442] mkdir("./file0", 0777) = 0 [ 132.809425][ T6442] loop0: detected capacity change from 0 to 32768 [ 132.820654][ T6442] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6442) [ 132.838140][ T6442] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.846975][ T6442] BTRFS info (device loop0): using free space tree [pid 6442] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6442] chdir("./file0") = 0 [pid 6442] ioctl(4, LOOP_CLR_FD) = 0 [pid 6442] close(4) = 0 [pid 6442] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6442] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] <... futex resumed>) = 0 [pid 6442] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [ 132.866480][ T6442] BTRFS info (device loop0): enabling ssd optimizations [ 132.873545][ T6442] BTRFS info (device loop0): auto enabling async discard [pid 6441] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6441] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6441] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6459 attached [pid 6459] set_robust_list(0x7fd089ba69e0, 24 [pid 6441] <... clone resumed>, parent_tid=[226], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 226 [pid 6459] <... set_robust_list resumed>) = 0 [pid 6459] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] <... futex resumed>) = 0 [pid 6459] openat(AT_FDCWD, ".", O_RDONLY [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6459] <... openat resumed>) = 5 [pid 6459] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [ 132.923114][ T6442] BTRFS info (device loop0): balance: start -s [ 132.932005][ T6442] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6459] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6441] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6441] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 132.969495][ T6442] BTRFS info (device loop0): balance: ended with status: 0 [pid 6459] <... ioctl resumed>) = 0 [pid 6459] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6459] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] close(3 [pid 6442] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] <... close resumed>) = 0 [pid 6441] close(4) = 0 [pid 6441] close(5) = 0 [pid 6441] close(6) = -1 EBADF (Bad file descriptor) [pid 6441] close(7) = -1 EBADF (Bad file descriptor) [pid 6441] close(8) = -1 EBADF (Bad file descriptor) [pid 6441] close(9) = -1 EBADF (Bad file descriptor) [pid 6441] close(10) = -1 EBADF (Bad file descriptor) [pid 6441] close(11) = -1 EBADF (Bad file descriptor) [pid 6441] close(12) = -1 EBADF (Bad file descriptor) [pid 6441] close(13) = -1 EBADF (Bad file descriptor) [pid 6441] close(14) = -1 EBADF (Bad file descriptor) [pid 6441] close(15) = -1 EBADF (Bad file descriptor) [pid 6441] close(16) = -1 EBADF (Bad file descriptor) [pid 6441] close(17) = -1 EBADF (Bad file descriptor) [pid 6441] close(18) = -1 EBADF (Bad file descriptor) [pid 6441] close(19) = -1 EBADF (Bad file descriptor) [pid 6441] close(20) = -1 EBADF (Bad file descriptor) [pid 6441] close(21) = -1 EBADF (Bad file descriptor) [pid 6441] close(22) = -1 EBADF (Bad file descriptor) [pid 6441] close(23) = -1 EBADF (Bad file descriptor) [pid 6441] close(24) = -1 EBADF (Bad file descriptor) [pid 6441] close(25) = -1 EBADF (Bad file descriptor) [pid 6441] close(26) = -1 EBADF (Bad file descriptor) [pid 6441] close(27) = -1 EBADF (Bad file descriptor) [pid 6441] close(28) = -1 EBADF (Bad file descriptor) [pid 6441] close(29) = -1 EBADF (Bad file descriptor) [pid 6441] exit_group(0 [pid 6459] <... futex resumed>) = ? [pid 6442] <... futex resumed>) = ? [pid 6441] <... exit_group resumed>) = ? [pid 6459] +++ exited with 0 +++ [pid 6442] +++ exited with 0 +++ [pid 6441] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=224, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./74/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./74/cgroup.cpu") = 0 [pid 5007] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./74/binderfs") = 0 [pid 5007] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./74/file0") = 0 [pid 5007] umount2("./74/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./74/cgroup") = 0 [pid 5007] umount2("./74/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./74/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./74/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./74") = 0 [pid 5007] mkdir("./75", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6460 attached [pid 6460] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 227 [pid 6460] <... set_robust_list resumed>) = 0 [pid 6460] chdir("./75") = 0 [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6460] setpgid(0, 0) = 0 [pid 6460] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6460] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6460] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6460] write(3, "1000", 4) = 4 [pid 6460] close(3) = 0 [pid 6460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6460] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6460] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6461 attached , parent_tid=[228], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 228 [pid 6460] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6461] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6461] memfd_create("syzkaller", 0) = 3 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6461] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6461] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6461] close(3) = 0 [pid 6461] mkdir("./file0", 0777) = 0 [ 133.465737][ T6461] loop0: detected capacity change from 0 to 32768 [ 133.477645][ T6461] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6461) [ 133.494680][ T6461] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 133.503766][ T6461] BTRFS info (device loop0): using free space tree [pid 6461] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6461] chdir("./file0") = 0 [pid 6461] ioctl(4, LOOP_CLR_FD) = 0 [pid 6461] close(4) = 0 [pid 6461] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6461] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = 0 [pid 6460] <... futex resumed>) = 1 [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6461] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6460] <... futex resumed>) = 0 [pid 6460] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6460] <... futex resumed>) = 0 [ 133.524330][ T6461] BTRFS info (device loop0): enabling ssd optimizations [ 133.531838][ T6461] BTRFS info (device loop0): auto enabling async discard [pid 6460] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6460] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6460] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6460] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6478 attached [pid 6478] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6478] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] <... clone resumed>, parent_tid=[229], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 229 [pid 6460] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6460] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... futex resumed>) = 0 [pid 6478] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6478] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = 1 [pid 6460] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6460] <... futex resumed>) = 0 [ 133.576721][ T6461] BTRFS info (device loop0): balance: start -s [ 133.585946][ T6461] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6460] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 133.659358][ T6461] BTRFS info (device loop0): balance: ended with status: 0 [pid 6461] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6461] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] <... ioctl resumed>) = 0 [pid 6478] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6478] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] close(3) = 0 [pid 6460] close(4) = 0 [pid 6460] close(5) = 0 [pid 6460] close(6) = -1 EBADF (Bad file descriptor) [pid 6460] close(7) = -1 EBADF (Bad file descriptor) [pid 6460] close(8) = -1 EBADF (Bad file descriptor) [pid 6460] close(9) = -1 EBADF (Bad file descriptor) [pid 6460] close(10) = -1 EBADF (Bad file descriptor) [pid 6460] close(11) = -1 EBADF (Bad file descriptor) [pid 6460] close(12) = -1 EBADF (Bad file descriptor) [pid 6460] close(13) = -1 EBADF (Bad file descriptor) [pid 6460] close(14) = -1 EBADF (Bad file descriptor) [pid 6460] close(15) = -1 EBADF (Bad file descriptor) [pid 6460] close(16) = -1 EBADF (Bad file descriptor) [pid 6460] close(17) = -1 EBADF (Bad file descriptor) [pid 6460] close(18) = -1 EBADF (Bad file descriptor) [pid 6460] close(19) = -1 EBADF (Bad file descriptor) [pid 6460] close(20) = -1 EBADF (Bad file descriptor) [pid 6460] close(21) = -1 EBADF (Bad file descriptor) [pid 6460] close(22) = -1 EBADF (Bad file descriptor) [pid 6460] close(23) = -1 EBADF (Bad file descriptor) [pid 6460] close(24) = -1 EBADF (Bad file descriptor) [pid 6460] close(25) = -1 EBADF (Bad file descriptor) [pid 6460] close(26) = -1 EBADF (Bad file descriptor) [pid 6460] close(27) = -1 EBADF (Bad file descriptor) [pid 6460] close(28) = -1 EBADF (Bad file descriptor) [pid 6460] close(29) = -1 EBADF (Bad file descriptor) [pid 6460] exit_group(0 [pid 6478] <... futex resumed>) = ? [pid 6461] <... futex resumed>) = ? [pid 6460] <... exit_group resumed>) = ? [pid 6478] +++ exited with 0 +++ [pid 6461] +++ exited with 0 +++ [pid 6460] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=227, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./75/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./75/cgroup.cpu") = 0 [pid 5007] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./75/binderfs") = 0 [pid 5007] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./75/file0") = 0 [pid 5007] umount2("./75/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./75/cgroup") = 0 [pid 5007] umount2("./75/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./75/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./75/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./75") = 0 [pid 5007] mkdir("./76", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 230 ./strace-static-x86_64: Process 6479 attached [pid 6479] set_robust_list(0x5555571235e0, 24) = 0 [pid 6479] chdir("./76") = 0 [pid 6479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6479] setpgid(0, 0) = 0 [pid 6479] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6479] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6479] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6479] write(3, "1000", 4) = 4 [pid 6479] close(3) = 0 [pid 6479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6479] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6479] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[231], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 231 [pid 6479] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6480 attached [pid 6480] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6480] memfd_create("syzkaller", 0) = 3 [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6480] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6480] close(3) = 0 [pid 6480] mkdir("./file0", 0777) = 0 [ 134.159469][ T6480] loop0: detected capacity change from 0 to 32768 [ 134.170327][ T6480] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6480) [ 134.187122][ T6480] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.195953][ T6480] BTRFS info (device loop0): using free space tree [pid 6480] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6480] chdir("./file0") = 0 [pid 6480] ioctl(4, LOOP_CLR_FD) = 0 [pid 6480] close(4) = 0 [pid 6480] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] <... futex resumed>) = 0 [pid 6480] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6479] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... openat resumed>) = 4 [pid 6480] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = 0 [pid 6479] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... futex resumed>) = 1 [ 134.215924][ T6480] BTRFS info (device loop0): enabling ssd optimizations [ 134.222936][ T6480] BTRFS info (device loop0): auto enabling async discard [pid 6480] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6479] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6479] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6479] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[232], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 232 [pid 6479] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6497 attached [pid 6497] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6497] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6497] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = 0 [pid 6479] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = 1 [ 134.267863][ T6480] BTRFS info (device loop0): balance: start -s [ 134.276852][ T6480] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6497] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6479] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 134.342421][ T6480] BTRFS info (device loop0): balance: ended with status: 0 [pid 6480] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6480] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6480] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] <... ioctl resumed>) = 0 [pid 6497] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] close(3) = 0 [pid 6479] close(4) = 0 [pid 6479] close(5) = 0 [pid 6479] close(6) = -1 EBADF (Bad file descriptor) [pid 6479] close(7) = -1 EBADF (Bad file descriptor) [pid 6479] close(8) = -1 EBADF (Bad file descriptor) [pid 6479] close(9) = -1 EBADF (Bad file descriptor) [pid 6479] close(10) = -1 EBADF (Bad file descriptor) [pid 6479] close(11) = -1 EBADF (Bad file descriptor) [pid 6479] close(12) = -1 EBADF (Bad file descriptor) [pid 6479] close(13) = -1 EBADF (Bad file descriptor) [pid 6479] close(14) = -1 EBADF (Bad file descriptor) [pid 6479] close(15) = -1 EBADF (Bad file descriptor) [pid 6479] close(16) = -1 EBADF (Bad file descriptor) [pid 6479] close(17) = -1 EBADF (Bad file descriptor) [pid 6479] close(18) = -1 EBADF (Bad file descriptor) [pid 6479] close(19) = -1 EBADF (Bad file descriptor) [pid 6479] close(20) = -1 EBADF (Bad file descriptor) [pid 6479] close(21) = -1 EBADF (Bad file descriptor) [pid 6479] close(22) = -1 EBADF (Bad file descriptor) [pid 6479] close(23) = -1 EBADF (Bad file descriptor) [pid 6479] close(24) = -1 EBADF (Bad file descriptor) [pid 6479] close(25) = -1 EBADF (Bad file descriptor) [pid 6479] close(26) = -1 EBADF (Bad file descriptor) [pid 6479] close(27) = -1 EBADF (Bad file descriptor) [pid 6479] close(28) = -1 EBADF (Bad file descriptor) [pid 6479] close(29) = -1 EBADF (Bad file descriptor) [pid 6479] exit_group(0 [pid 6497] <... futex resumed>) = ? [pid 6480] <... futex resumed>) = ? [pid 6479] <... exit_group resumed>) = ? [pid 6497] +++ exited with 0 +++ [pid 6480] +++ exited with 0 +++ [pid 6479] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=230, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./76/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./76/cgroup.cpu") = 0 [pid 5007] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./76/binderfs") = 0 [pid 5007] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./76/file0") = 0 [pid 5007] umount2("./76/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./76/cgroup") = 0 [pid 5007] umount2("./76/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./76/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./76/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./76") = 0 [pid 5007] mkdir("./77", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6498 attached , child_tidptr=0x5555571235d0) = 233 [pid 6498] set_robust_list(0x5555571235e0, 24) = 0 [pid 6498] chdir("./77") = 0 [pid 6498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6498] setpgid(0, 0) = 0 [pid 6498] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6498] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6498] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6498] write(3, "1000", 4) = 4 [pid 6498] close(3) = 0 [pid 6498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6498] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6498] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6499 attached [pid 6499] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6499] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] <... clone resumed>, parent_tid=[234], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 234 [pid 6498] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6499] memfd_create("syzkaller", 0) = 3 [pid 6499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6499] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6499] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6499] close(3) = 0 [pid 6499] mkdir("./file0", 0777) = 0 [ 134.863275][ T6499] loop0: detected capacity change from 0 to 32768 [ 134.874298][ T6499] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6499) [ 134.891006][ T6499] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.900267][ T6499] BTRFS info (device loop0): using free space tree [pid 6499] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6499] chdir("./file0") = 0 [pid 6499] ioctl(4, LOOP_CLR_FD) = 0 [pid 6499] close(4) = 0 [pid 6499] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] <... futex resumed>) = 1 [pid 6499] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6499] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] <... futex resumed>) = 1 [pid 6498] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 134.921227][ T6499] BTRFS info (device loop0): enabling ssd optimizations [ 134.928692][ T6499] BTRFS info (device loop0): auto enabling async discard [pid 6499] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6498] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6498] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [ 134.964859][ T6499] BTRFS info (device loop0): balance: start -s [ 134.977280][ T6499] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6498] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[235], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 235 [pid 6498] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6516 attached [pid 6516] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6516] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6516] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6498] <... futex resumed>) = 0 [pid 6516] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6498] <... futex resumed>) = 0 [pid 6516] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 135.008613][ T6499] BTRFS info (device loop0): balance: ended with status: 0 [pid 6498] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6499] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6499] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6516] <... ioctl resumed>) = 0 [pid 6516] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6498] close(3 [pid 6516] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6498] <... close resumed>) = 0 [pid 6498] close(4) = 0 [pid 6498] close(5) = 0 [pid 6498] close(6) = -1 EBADF (Bad file descriptor) [pid 6498] close(7) = -1 EBADF (Bad file descriptor) [pid 6498] close(8) = -1 EBADF (Bad file descriptor) [pid 6498] close(9) = -1 EBADF (Bad file descriptor) [pid 6498] close(10) = -1 EBADF (Bad file descriptor) [pid 6498] close(11) = -1 EBADF (Bad file descriptor) [pid 6498] close(12) = -1 EBADF (Bad file descriptor) [pid 6498] close(13) = -1 EBADF (Bad file descriptor) [pid 6498] close(14) = -1 EBADF (Bad file descriptor) [pid 6498] close(15) = -1 EBADF (Bad file descriptor) [pid 6498] close(16) = -1 EBADF (Bad file descriptor) [pid 6498] close(17) = -1 EBADF (Bad file descriptor) [pid 6498] close(18) = -1 EBADF (Bad file descriptor) [pid 6498] close(19) = -1 EBADF (Bad file descriptor) [pid 6498] close(20) = -1 EBADF (Bad file descriptor) [pid 6498] close(21) = -1 EBADF (Bad file descriptor) [pid 6498] close(22) = -1 EBADF (Bad file descriptor) [pid 6498] close(23) = -1 EBADF (Bad file descriptor) [pid 6498] close(24) = -1 EBADF (Bad file descriptor) [pid 6498] close(25) = -1 EBADF (Bad file descriptor) [pid 6498] close(26) = -1 EBADF (Bad file descriptor) [pid 6498] close(27) = -1 EBADF (Bad file descriptor) [pid 6498] close(28) = -1 EBADF (Bad file descriptor) [pid 6498] close(29) = -1 EBADF (Bad file descriptor) [pid 6498] exit_group(0 [pid 6516] <... futex resumed>) = ? [pid 6499] <... futex resumed>) = ? [pid 6516] +++ exited with 0 +++ [pid 6499] +++ exited with 0 +++ [pid 6498] <... exit_group resumed>) = ? [pid 6498] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=233, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5007] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./77/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./77/cgroup.cpu") = 0 [pid 5007] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./77/binderfs") = 0 [pid 5007] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./77/file0") = 0 [pid 5007] umount2("./77/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./77/cgroup") = 0 [pid 5007] umount2("./77/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./77/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./77/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./77") = 0 [pid 5007] mkdir("./78", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6517 attached [pid 6517] set_robust_list(0x5555571235e0, 24) = 0 [pid 6517] chdir("./78" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 236 [pid 6517] <... chdir resumed>) = 0 [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6517] setpgid(0, 0) = 0 [pid 6517] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6517] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6517] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6517] write(3, "1000", 4) = 4 [pid 6517] close(3) = 0 [pid 6517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6517] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6517] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[237], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 237 [pid 6517] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6518 attached [pid 6518] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6518] memfd_create("syzkaller", 0) = 3 [pid 6518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6518] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6518] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6518] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6518] close(3) = 0 [pid 6518] mkdir("./file0", 0777) = 0 [ 135.556533][ T6518] loop0: detected capacity change from 0 to 32768 [ 135.566118][ T6518] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6518) [ 135.582895][ T6518] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 135.591883][ T6518] BTRFS info (device loop0): using free space tree [pid 6518] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6518] chdir("./file0") = 0 [pid 6518] ioctl(4, LOOP_CLR_FD) = 0 [pid 6518] close(4) = 0 [pid 6518] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6517] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... futex resumed>) = 1 [pid 6518] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6518] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6517] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... futex resumed>) = 1 [ 135.612378][ T6518] BTRFS info (device loop0): enabling ssd optimizations [ 135.619485][ T6518] BTRFS info (device loop0): auto enabling async discard [pid 6518] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6517] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6517] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[238], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 238 [pid 6517] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 135.658952][ T6518] BTRFS info (device loop0): balance: start -s [ 135.668051][ T6518] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6517] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6535 attached [pid 6535] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6535] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6535] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6517] <... futex resumed>) = 0 [pid 6535] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6535] <... futex resumed>) = 0 [pid 6517] <... futex resumed>) = 1 [pid 6535] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 135.702356][ T6518] BTRFS info (device loop0): balance: ended with status: 0 [pid 6517] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6518] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6518] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6518] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6535] <... ioctl resumed>) = 0 [pid 6535] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] close(3) = 0 [pid 6517] close(4) = 0 [pid 6517] close(5) = 0 [pid 6517] close(6) = -1 EBADF (Bad file descriptor) [pid 6517] close(7) = -1 EBADF (Bad file descriptor) [pid 6517] close(8) = -1 EBADF (Bad file descriptor) [pid 6517] close(9) = -1 EBADF (Bad file descriptor) [pid 6517] close(10) = -1 EBADF (Bad file descriptor) [pid 6517] close(11) = -1 EBADF (Bad file descriptor) [pid 6517] close(12) = -1 EBADF (Bad file descriptor) [pid 6517] close(13) = -1 EBADF (Bad file descriptor) [pid 6517] close(14) = -1 EBADF (Bad file descriptor) [pid 6517] close(15) = -1 EBADF (Bad file descriptor) [pid 6517] close(16) = -1 EBADF (Bad file descriptor) [pid 6517] close(17) = -1 EBADF (Bad file descriptor) [pid 6517] close(18) = -1 EBADF (Bad file descriptor) [pid 6517] close(19) = -1 EBADF (Bad file descriptor) [pid 6517] close(20) = -1 EBADF (Bad file descriptor) [pid 6517] close(21) = -1 EBADF (Bad file descriptor) [pid 6517] close(22) = -1 EBADF (Bad file descriptor) [pid 6517] close(23) = -1 EBADF (Bad file descriptor) [pid 6517] close(24) = -1 EBADF (Bad file descriptor) [pid 6517] close(25) = -1 EBADF (Bad file descriptor) [pid 6517] close(26) = -1 EBADF (Bad file descriptor) [pid 6517] close(27) = -1 EBADF (Bad file descriptor) [pid 6517] close(28) = -1 EBADF (Bad file descriptor) [pid 6517] close(29) = -1 EBADF (Bad file descriptor) [pid 6517] exit_group(0 [pid 6535] <... futex resumed>) = ? [pid 6518] <... futex resumed>) = ? [pid 6517] <... exit_group resumed>) = ? [pid 6535] +++ exited with 0 +++ [pid 6518] +++ exited with 0 +++ [pid 6517] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=236, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./78/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./78/cgroup.cpu") = 0 [pid 5007] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./78/binderfs") = 0 [pid 5007] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./78/file0") = 0 [pid 5007] umount2("./78/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./78/cgroup") = 0 [pid 5007] umount2("./78/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./78/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./78/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./78") = 0 [pid 5007] mkdir("./79", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6536 attached [pid 6536] set_robust_list(0x5555571235e0, 24) = 0 [pid 6536] chdir("./79") = 0 [pid 6536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6536] setpgid(0, 0) = 0 [pid 6536] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6536] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6536] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 239 [pid 6536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6536] write(3, "1000", 4) = 4 [pid 6536] close(3) = 0 [pid 6536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6536] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6536] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6537 attached , parent_tid=[240], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 240 [pid 6537] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6537] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] memfd_create("syzkaller", 0 [pid 6536] <... futex resumed>) = 0 [pid 6537] <... memfd_create resumed>) = 3 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6537] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6537] close(3) = 0 [pid 6537] mkdir("./file0", 0777) = 0 [ 136.237349][ T6537] loop0: detected capacity change from 0 to 32768 [ 136.249441][ T6537] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6537) [ 136.266988][ T6537] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 136.275781][ T6537] BTRFS info (device loop0): using free space tree [pid 6537] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6537] chdir("./file0") = 0 [pid 6537] ioctl(4, LOOP_CLR_FD) = 0 [pid 6537] close(4) = 0 [pid 6537] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6537] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 0 [pid 6537] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6537] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 136.295709][ T6537] BTRFS info (device loop0): enabling ssd optimizations [ 136.302838][ T6537] BTRFS info (device loop0): auto enabling async discard [pid 6537] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6536] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6536] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6536] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6536] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[241], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 241 ./strace-static-x86_64: Process 6554 attached [pid 6536] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] set_robust_list(0x7fd089ba69e0, 24 [pid 6536] <... futex resumed>) = 0 [pid 6554] <... set_robust_list resumed>) = 0 [pid 6536] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6554] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... futex resumed>) = 1 [ 136.353089][ T6537] BTRFS info (device loop0): balance: start -s [ 136.362634][ T6537] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6554] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6537] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6537] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 136.423862][ T6537] BTRFS info (device loop0): balance: ended with status: 0 [pid 6537] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... ioctl resumed>) = 0 [pid 6554] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6554] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] close(3) = 0 [pid 6536] close(4) = 0 [pid 6536] close(5) = 0 [pid 6536] close(6) = -1 EBADF (Bad file descriptor) [pid 6536] close(7) = -1 EBADF (Bad file descriptor) [pid 6536] close(8) = -1 EBADF (Bad file descriptor) [pid 6536] close(9) = -1 EBADF (Bad file descriptor) [pid 6536] close(10) = -1 EBADF (Bad file descriptor) [pid 6536] close(11) = -1 EBADF (Bad file descriptor) [pid 6536] close(12) = -1 EBADF (Bad file descriptor) [pid 6536] close(13) = -1 EBADF (Bad file descriptor) [pid 6536] close(14) = -1 EBADF (Bad file descriptor) [pid 6536] close(15) = -1 EBADF (Bad file descriptor) [pid 6536] close(16) = -1 EBADF (Bad file descriptor) [pid 6536] close(17) = -1 EBADF (Bad file descriptor) [pid 6536] close(18) = -1 EBADF (Bad file descriptor) [pid 6536] close(19) = -1 EBADF (Bad file descriptor) [pid 6536] close(20) = -1 EBADF (Bad file descriptor) [pid 6536] close(21) = -1 EBADF (Bad file descriptor) [pid 6536] close(22) = -1 EBADF (Bad file descriptor) [pid 6536] close(23) = -1 EBADF (Bad file descriptor) [pid 6536] close(24) = -1 EBADF (Bad file descriptor) [pid 6536] close(25) = -1 EBADF (Bad file descriptor) [pid 6536] close(26) = -1 EBADF (Bad file descriptor) [pid 6536] close(27) = -1 EBADF (Bad file descriptor) [pid 6536] close(28) = -1 EBADF (Bad file descriptor) [pid 6536] close(29) = -1 EBADF (Bad file descriptor) [pid 6536] exit_group(0 [pid 6554] <... futex resumed>) = ? [pid 6537] <... futex resumed>) = ? [pid 6536] <... exit_group resumed>) = ? [pid 6554] +++ exited with 0 +++ [pid 6537] +++ exited with 0 +++ [pid 6536] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=239, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./79/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./79/cgroup.cpu") = 0 [pid 5007] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./79/binderfs") = 0 [pid 5007] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./79/file0") = 0 [pid 5007] umount2("./79/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./79/cgroup") = 0 [pid 5007] umount2("./79/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./79/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./79/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./79") = 0 [pid 5007] mkdir("./80", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 242 ./strace-static-x86_64: Process 6555 attached [pid 6555] set_robust_list(0x5555571235e0, 24) = 0 [pid 6555] chdir("./80") = 0 [pid 6555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6555] setpgid(0, 0) = 0 [pid 6555] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6555] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6555] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6555] write(3, "1000", 4) = 4 [pid 6555] close(3) = 0 [pid 6555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6555] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6555] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6556 attached [pid 6556] set_robust_list(0x7fd090fc79e0, 24 [pid 6555] <... clone resumed>, parent_tid=[243], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 243 [pid 6556] <... set_robust_list resumed>) = 0 [pid 6555] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6556] memfd_create("syzkaller", 0) = 3 [pid 6556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6556] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6556] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6556] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6556] close(3) = 0 [pid 6556] mkdir("./file0", 0777) = 0 [ 136.937482][ T6556] loop0: detected capacity change from 0 to 32768 [ 136.951643][ T6556] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6556) [ 136.968807][ T6556] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 136.977648][ T6556] BTRFS info (device loop0): using free space tree [pid 6556] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6556] chdir("./file0") = 0 [pid 6556] ioctl(4, LOOP_CLR_FD) = 0 [pid 6556] close(4) = 0 [pid 6556] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = 0 [pid 6555] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6556] <... futex resumed>) = 1 [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6556] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6556] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6555] <... futex resumed>) = 0 [pid 6556] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6555] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 136.997805][ T6556] BTRFS info (device loop0): enabling ssd optimizations [ 137.004894][ T6556] BTRFS info (device loop0): auto enabling async discard [ 137.058259][ T6556] BTRFS info (device loop0): balance: start -s [ 137.066733][ T6556] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6555] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6555] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6555] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6555] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6573 attached [pid 6573] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6573] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... clone resumed>, parent_tid=[244], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 244 [pid 6555] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6573] <... futex resumed>) = 0 [pid 6573] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6573] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6573] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6555] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6573] <... futex resumed>) = 0 [pid 6573] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6555] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6556] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6556] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.100993][ T6556] BTRFS info (device loop0): balance: ended with status: 0 [pid 6556] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6573] <... ioctl resumed>) = 0 [pid 6573] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6555] close(3 [pid 6573] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] <... close resumed>) = 0 [pid 6555] close(4) = 0 [pid 6555] close(5) = 0 [pid 6555] close(6) = -1 EBADF (Bad file descriptor) [pid 6555] close(7) = -1 EBADF (Bad file descriptor) [pid 6555] close(8) = -1 EBADF (Bad file descriptor) [pid 6555] close(9) = -1 EBADF (Bad file descriptor) [pid 6555] close(10) = -1 EBADF (Bad file descriptor) [pid 6555] close(11) = -1 EBADF (Bad file descriptor) [pid 6555] close(12) = -1 EBADF (Bad file descriptor) [pid 6555] close(13) = -1 EBADF (Bad file descriptor) [pid 6555] close(14) = -1 EBADF (Bad file descriptor) [pid 6555] close(15) = -1 EBADF (Bad file descriptor) [pid 6555] close(16) = -1 EBADF (Bad file descriptor) [pid 6555] close(17) = -1 EBADF (Bad file descriptor) [pid 6555] close(18) = -1 EBADF (Bad file descriptor) [pid 6555] close(19) = -1 EBADF (Bad file descriptor) [pid 6555] close(20) = -1 EBADF (Bad file descriptor) [pid 6555] close(21) = -1 EBADF (Bad file descriptor) [pid 6555] close(22) = -1 EBADF (Bad file descriptor) [pid 6555] close(23) = -1 EBADF (Bad file descriptor) [pid 6555] close(24) = -1 EBADF (Bad file descriptor) [pid 6555] close(25) = -1 EBADF (Bad file descriptor) [pid 6555] close(26) = -1 EBADF (Bad file descriptor) [pid 6555] close(27) = -1 EBADF (Bad file descriptor) [pid 6555] close(28) = -1 EBADF (Bad file descriptor) [pid 6555] close(29) = -1 EBADF (Bad file descriptor) [pid 6555] exit_group(0 [pid 6573] <... futex resumed>) = ? [pid 6556] <... futex resumed>) = ? [pid 6555] <... exit_group resumed>) = ? [pid 6573] +++ exited with 0 +++ [pid 6556] +++ exited with 0 +++ [pid 6555] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=242, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=37 /* 0.37 s */} --- [pid 5007] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./80/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./80/cgroup.cpu") = 0 [pid 5007] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./80/binderfs") = 0 [pid 5007] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./80/file0") = 0 [pid 5007] umount2("./80/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./80/cgroup") = 0 [pid 5007] umount2("./80/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./80/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./80/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./80") = 0 [pid 5007] mkdir("./81", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6574 attached [pid 6574] set_robust_list(0x5555571235e0, 24) = 0 [pid 6574] chdir("./81" [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 245 [pid 6574] <... chdir resumed>) = 0 [pid 6574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6574] setpgid(0, 0) = 0 [pid 6574] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6574] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6574] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6574] write(3, "1000", 4) = 4 [pid 6574] close(3) = 0 [pid 6574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6574] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6575 attached , parent_tid=[246], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 246 [pid 6575] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6575] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6575] <... futex resumed>) = 0 [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6575] memfd_create("syzkaller", 0) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6575] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6575] close(3) = 0 [pid 6575] mkdir("./file0", 0777) = 0 [ 137.644955][ T6575] loop0: detected capacity change from 0 to 32768 [ 137.656225][ T6575] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6575) [ 137.672790][ T6575] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 137.681641][ T6575] BTRFS info (device loop0): using free space tree [pid 6575] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6575] chdir("./file0") = 0 [pid 6575] ioctl(4, LOOP_CLR_FD) = 0 [pid 6575] close(4) = 0 [pid 6575] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6575] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6574] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] <... openat resumed>) = 4 [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] <... futex resumed>) = 0 [pid 6575] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6574] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.700875][ T6575] BTRFS info (device loop0): enabling ssd optimizations [ 137.708167][ T6575] BTRFS info (device loop0): auto enabling async discard [pid 6574] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6574] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6574] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6574] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6592 attached [pid 6592] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6592] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] <... clone resumed>, parent_tid=[247], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 247 [pid 6574] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6574] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] <... futex resumed>) = 0 [pid 6592] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6592] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6574] <... futex resumed>) = 0 [pid 6574] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6574] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] <... futex resumed>) = 1 [ 137.755226][ T6575] BTRFS info (device loop0): balance: start -s [ 137.764418][ T6575] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6592] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 137.847098][ T6575] BTRFS info (device loop0): balance: ended with status: 0 [pid 6575] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6575] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] <... ioctl resumed>) = 0 [pid 6575] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6592] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6592] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] close(3) = 0 [pid 6574] close(4) = 0 [pid 6574] close(5) = 0 [pid 6574] close(6) = -1 EBADF (Bad file descriptor) [pid 6574] close(7) = -1 EBADF (Bad file descriptor) [pid 6574] close(8) = -1 EBADF (Bad file descriptor) [pid 6574] close(9) = -1 EBADF (Bad file descriptor) [pid 6574] close(10) = -1 EBADF (Bad file descriptor) [pid 6574] close(11) = -1 EBADF (Bad file descriptor) [pid 6574] close(12) = -1 EBADF (Bad file descriptor) [pid 6574] close(13) = -1 EBADF (Bad file descriptor) [pid 6574] close(14) = -1 EBADF (Bad file descriptor) [pid 6574] close(15) = -1 EBADF (Bad file descriptor) [pid 6574] close(16) = -1 EBADF (Bad file descriptor) [pid 6574] close(17) = -1 EBADF (Bad file descriptor) [pid 6574] close(18) = -1 EBADF (Bad file descriptor) [pid 6574] close(19) = -1 EBADF (Bad file descriptor) [pid 6574] close(20) = -1 EBADF (Bad file descriptor) [pid 6574] close(21) = -1 EBADF (Bad file descriptor) [pid 6574] close(22) = -1 EBADF (Bad file descriptor) [pid 6574] close(23) = -1 EBADF (Bad file descriptor) [pid 6574] close(24) = -1 EBADF (Bad file descriptor) [pid 6574] close(25) = -1 EBADF (Bad file descriptor) [pid 6574] close(26) = -1 EBADF (Bad file descriptor) [pid 6574] close(27) = -1 EBADF (Bad file descriptor) [pid 6574] close(28) = -1 EBADF (Bad file descriptor) [pid 6574] close(29) = -1 EBADF (Bad file descriptor) [pid 6574] exit_group(0 [pid 6592] <... futex resumed>) = ? [pid 6575] <... futex resumed>) = ? [pid 6574] <... exit_group resumed>) = ? [pid 6592] +++ exited with 0 +++ [pid 6575] +++ exited with 0 +++ [pid 6574] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=245, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5007] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./81/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./81/cgroup.cpu") = 0 [pid 5007] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./81/binderfs") = 0 [pid 5007] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./81/file0") = 0 [pid 5007] umount2("./81/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./81/cgroup") = 0 [pid 5007] umount2("./81/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./81/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./81/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./81") = 0 [pid 5007] mkdir("./82", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 248 ./strace-static-x86_64: Process 6593 attached [pid 6593] set_robust_list(0x5555571235e0, 24) = 0 [pid 6593] chdir("./82") = 0 [pid 6593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6593] setpgid(0, 0) = 0 [pid 6593] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6593] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6593] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6593] write(3, "1000", 4) = 4 [pid 6593] close(3) = 0 [pid 6593] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6593] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6593] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6594 attached [pid 6594] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... clone resumed>, parent_tid=[249], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 249 [pid 6593] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6594] memfd_create("syzkaller", 0) = 3 [pid 6594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6594] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6594] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6594] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6594] close(3) = 0 [pid 6594] mkdir("./file0", 0777) = 0 [ 138.366044][ T6594] loop0: detected capacity change from 0 to 32768 [ 138.376123][ T6594] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6594) [ 138.393190][ T6594] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 138.402035][ T6594] BTRFS info (device loop0): using free space tree [pid 6594] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6594] chdir("./file0") = 0 [pid 6594] ioctl(4, LOOP_CLR_FD) = 0 [pid 6594] close(4) = 0 [pid 6594] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = 0 [pid 6593] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] <... futex resumed>) = 0 [pid 6594] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6594] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = 0 [ 138.420733][ T6594] BTRFS info (device loop0): enabling ssd optimizations [ 138.427890][ T6594] BTRFS info (device loop0): auto enabling async discard [pid 6593] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6593] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6593] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6593] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6593] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6593] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6611 attached [pid 6611] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6611] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... clone resumed>, parent_tid=[250], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 250 [pid 6593] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6611] <... futex resumed>) = 0 [pid 6593] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6611] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 138.496365][ T6594] BTRFS info (device loop0): balance: start -s [ 138.505936][ T6594] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6611] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6593] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = 1 [pid 6611] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6593] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6594] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6594] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 138.550105][ T6594] BTRFS info (device loop0): balance: ended with status: 0 [pid 6611] <... ioctl resumed>) = 0 [pid 6611] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] close(3 [pid 6611] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] <... close resumed>) = 0 [pid 6593] close(4) = 0 [pid 6593] close(5) = 0 [pid 6593] close(6) = -1 EBADF (Bad file descriptor) [pid 6593] close(7) = -1 EBADF (Bad file descriptor) [pid 6593] close(8) = -1 EBADF (Bad file descriptor) [pid 6593] close(9) = -1 EBADF (Bad file descriptor) [pid 6593] close(10) = -1 EBADF (Bad file descriptor) [pid 6593] close(11) = -1 EBADF (Bad file descriptor) [pid 6593] close(12) = -1 EBADF (Bad file descriptor) [pid 6593] close(13) = -1 EBADF (Bad file descriptor) [pid 6593] close(14) = -1 EBADF (Bad file descriptor) [pid 6593] close(15) = -1 EBADF (Bad file descriptor) [pid 6593] close(16) = -1 EBADF (Bad file descriptor) [pid 6593] close(17) = -1 EBADF (Bad file descriptor) [pid 6593] close(18) = -1 EBADF (Bad file descriptor) [pid 6593] close(19) = -1 EBADF (Bad file descriptor) [pid 6593] close(20) = -1 EBADF (Bad file descriptor) [pid 6593] close(21) = -1 EBADF (Bad file descriptor) [pid 6593] close(22) = -1 EBADF (Bad file descriptor) [pid 6593] close(23) = -1 EBADF (Bad file descriptor) [pid 6593] close(24) = -1 EBADF (Bad file descriptor) [pid 6593] close(25) = -1 EBADF (Bad file descriptor) [pid 6593] close(26) = -1 EBADF (Bad file descriptor) [pid 6593] close(27) = -1 EBADF (Bad file descriptor) [pid 6593] close(28) = -1 EBADF (Bad file descriptor) [pid 6593] close(29) = -1 EBADF (Bad file descriptor) [pid 6593] exit_group(0 [pid 6611] <... futex resumed>) = ? [pid 6594] <... futex resumed>) = ? [pid 6593] <... exit_group resumed>) = ? [pid 6611] +++ exited with 0 +++ [pid 6594] +++ exited with 0 +++ [pid 6593] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=248, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./82/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./82/cgroup.cpu") = 0 [pid 5007] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./82/binderfs") = 0 [pid 5007] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./82/file0") = 0 [pid 5007] umount2("./82/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./82/cgroup") = 0 [pid 5007] umount2("./82/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./82/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./82/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./82") = 0 [pid 5007] mkdir("./83", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 251 ./strace-static-x86_64: Process 6612 attached [pid 6612] set_robust_list(0x5555571235e0, 24) = 0 [pid 6612] chdir("./83") = 0 [pid 6612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6612] setpgid(0, 0) = 0 [pid 6612] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6612] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6612] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6612] write(3, "1000", 4) = 4 [pid 6612] close(3) = 0 [pid 6612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6612] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6612] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6613 attached [pid 6613] set_robust_list(0x7fd090fc79e0, 24 [pid 6612] <... clone resumed>, parent_tid=[252], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 252 [pid 6613] <... set_robust_list resumed>) = 0 [pid 6612] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] memfd_create("syzkaller", 0 [pid 6612] <... futex resumed>) = 0 [pid 6613] <... memfd_create resumed>) = 3 [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6613] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6613] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6613] close(3) = 0 [pid 6613] mkdir("./file0", 0777) = 0 [ 139.076706][ T6613] loop0: detected capacity change from 0 to 32768 [ 139.088420][ T6613] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6613) [ 139.105325][ T6613] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.114074][ T6613] BTRFS info (device loop0): using free space tree [pid 6613] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6613] chdir("./file0") = 0 [pid 6613] ioctl(4, LOOP_CLR_FD) = 0 [pid 6613] close(4) = 0 [pid 6613] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6613] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6612] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... openat resumed>) = 4 [pid 6612] <... futex resumed>) = 0 [pid 6613] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6613] <... futex resumed>) = 0 [pid 6612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6613] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6612] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.134913][ T6613] BTRFS info (device loop0): enabling ssd optimizations [ 139.142294][ T6613] BTRFS info (device loop0): auto enabling async discard [pid 6612] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6612] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6612] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6612] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6630 attached [pid 6630] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6630] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] <... clone resumed>, parent_tid=[253], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 253 [pid 6612] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... futex resumed>) = 0 [pid 6630] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6630] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] <... futex resumed>) = 0 [pid 6612] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.182249][ T6613] BTRFS info (device loop0): balance: start -s [ 139.191082][ T6613] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6612] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... futex resumed>) = 1 [pid 6630] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 139.248407][ T6613] BTRFS info (device loop0): balance: ended with status: 0 [pid 6613] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6613] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6630] <... ioctl resumed>) = 0 [pid 6630] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6630] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] close(3) = 0 [pid 6612] close(4) = 0 [pid 6612] close(5) = 0 [pid 6612] close(6) = -1 EBADF (Bad file descriptor) [pid 6612] close(7) = -1 EBADF (Bad file descriptor) [pid 6612] close(8) = -1 EBADF (Bad file descriptor) [pid 6612] close(9) = -1 EBADF (Bad file descriptor) [pid 6612] close(10) = -1 EBADF (Bad file descriptor) [pid 6612] close(11) = -1 EBADF (Bad file descriptor) [pid 6612] close(12) = -1 EBADF (Bad file descriptor) [pid 6612] close(13) = -1 EBADF (Bad file descriptor) [pid 6612] close(14) = -1 EBADF (Bad file descriptor) [pid 6612] close(15) = -1 EBADF (Bad file descriptor) [pid 6612] close(16) = -1 EBADF (Bad file descriptor) [pid 6612] close(17) = -1 EBADF (Bad file descriptor) [pid 6612] close(18) = -1 EBADF (Bad file descriptor) [pid 6612] close(19) = -1 EBADF (Bad file descriptor) [pid 6612] close(20) = -1 EBADF (Bad file descriptor) [pid 6612] close(21) = -1 EBADF (Bad file descriptor) [pid 6612] close(22) = -1 EBADF (Bad file descriptor) [pid 6612] close(23) = -1 EBADF (Bad file descriptor) [pid 6612] close(24) = -1 EBADF (Bad file descriptor) [pid 6612] close(25) = -1 EBADF (Bad file descriptor) [pid 6612] close(26) = -1 EBADF (Bad file descriptor) [pid 6612] close(27) = -1 EBADF (Bad file descriptor) [pid 6612] close(28) = -1 EBADF (Bad file descriptor) [pid 6612] close(29) = -1 EBADF (Bad file descriptor) [pid 6612] exit_group(0 [pid 6630] <... futex resumed>) = ? [pid 6613] <... futex resumed>) = ? [pid 6612] <... exit_group resumed>) = ? [pid 6630] +++ exited with 0 +++ [pid 6613] +++ exited with 0 +++ [pid 6612] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=251, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./83/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./83/cgroup.cpu") = 0 [pid 5007] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./83/binderfs") = 0 [pid 5007] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./83/file0") = 0 [pid 5007] umount2("./83/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./83/cgroup") = 0 [pid 5007] umount2("./83/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./83/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./83/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./83") = 0 [pid 5007] mkdir("./84", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6631 attached [pid 6631] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 254 [pid 6631] <... set_robust_list resumed>) = 0 [pid 6631] chdir("./84") = 0 [pid 6631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6631] setpgid(0, 0) = 0 [pid 6631] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6631] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6631] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6631] write(3, "1000", 4) = 4 [pid 6631] close(3) = 0 [pid 6631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6631] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6632 attached , parent_tid=[255], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 255 [pid 6632] set_robust_list(0x7fd090fc79e0, 24 [pid 6631] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] <... set_robust_list resumed>) = 0 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6632] memfd_create("syzkaller", 0) = 3 [pid 6632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6632] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6632] close(3) = 0 [pid 6632] mkdir("./file0", 0777) = 0 [ 139.753746][ T6632] loop0: detected capacity change from 0 to 32768 [ 139.765496][ T6632] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6632) [ 139.782859][ T6632] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.791888][ T6632] BTRFS info (device loop0): using free space tree [pid 6632] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6632] chdir("./file0") = 0 [pid 6632] ioctl(4, LOOP_CLR_FD) = 0 [pid 6632] close(4) = 0 [pid 6632] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6632] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6631] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... openat resumed>) = 4 [pid 6632] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6631] <... futex resumed>) = 0 [ 139.812273][ T6632] BTRFS info (device loop0): enabling ssd optimizations [ 139.819627][ T6632] BTRFS info (device loop0): auto enabling async discard [pid 6631] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6631] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6631] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6649 attached [pid 6649] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6649] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... clone resumed>, parent_tid=[256], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 256 [pid 6631] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6631] <... futex resumed>) = 1 [pid 6649] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6631] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6649] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6649] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... futex resumed>) = 0 [pid 6631] <... futex resumed>) = 1 [pid 6649] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6631] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6632] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 139.873170][ T6632] BTRFS info (device loop0): balance: start -s [ 139.882118][ T6632] BTRFS info (device loop0): relocating block group 1048576 flags system [ 139.911111][ T6632] BTRFS info (device loop0): balance: ended with status: 0 [pid 6632] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6649] <... ioctl resumed>) = 0 [pid 6649] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] close(3 [pid 6649] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... close resumed>) = 0 [pid 6631] close(4) = 0 [pid 6631] close(5) = 0 [pid 6631] close(6) = -1 EBADF (Bad file descriptor) [pid 6631] close(7) = -1 EBADF (Bad file descriptor) [pid 6631] close(8) = -1 EBADF (Bad file descriptor) [pid 6631] close(9) = -1 EBADF (Bad file descriptor) [pid 6631] close(10) = -1 EBADF (Bad file descriptor) [pid 6631] close(11) = -1 EBADF (Bad file descriptor) [pid 6631] close(12) = -1 EBADF (Bad file descriptor) [pid 6631] close(13) = -1 EBADF (Bad file descriptor) [pid 6631] close(14) = -1 EBADF (Bad file descriptor) [pid 6631] close(15) = -1 EBADF (Bad file descriptor) [pid 6631] close(16) = -1 EBADF (Bad file descriptor) [pid 6631] close(17) = -1 EBADF (Bad file descriptor) [pid 6631] close(18) = -1 EBADF (Bad file descriptor) [pid 6631] close(19) = -1 EBADF (Bad file descriptor) [pid 6631] close(20) = -1 EBADF (Bad file descriptor) [pid 6631] close(21) = -1 EBADF (Bad file descriptor) [pid 6631] close(22) = -1 EBADF (Bad file descriptor) [pid 6631] close(23) = -1 EBADF (Bad file descriptor) [pid 6631] close(24) = -1 EBADF (Bad file descriptor) [pid 6631] close(25) = -1 EBADF (Bad file descriptor) [pid 6631] close(26) = -1 EBADF (Bad file descriptor) [pid 6631] close(27) = -1 EBADF (Bad file descriptor) [pid 6631] close(28) = -1 EBADF (Bad file descriptor) [pid 6631] close(29) = -1 EBADF (Bad file descriptor) [pid 6631] exit_group(0 [pid 6649] <... futex resumed>) = ? [pid 6632] <... futex resumed>) = ? [pid 6631] <... exit_group resumed>) = ? [pid 6649] +++ exited with 0 +++ [pid 6632] +++ exited with 0 +++ [pid 6631] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=254, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5007] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./84/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./84/cgroup.cpu") = 0 [pid 5007] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./84/binderfs") = 0 [pid 5007] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./84/file0") = 0 [pid 5007] umount2("./84/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./84/cgroup") = 0 [pid 5007] umount2("./84/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./84/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./84/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./84") = 0 [pid 5007] mkdir("./85", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 257 ./strace-static-x86_64: Process 6650 attached [pid 6650] set_robust_list(0x5555571235e0, 24) = 0 [pid 6650] chdir("./85") = 0 [pid 6650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6650] setpgid(0, 0) = 0 [pid 6650] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6650] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6650] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6650] write(3, "1000", 4) = 4 [pid 6650] close(3) = 0 [pid 6650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6650] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6650] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6651 attached [pid 6651] set_robust_list(0x7fd090fc79e0, 24 [pid 6650] <... clone resumed>, parent_tid=[258], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 258 [pid 6651] <... set_robust_list resumed>) = 0 [pid 6650] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6651] memfd_create("syzkaller", 0) = 3 [pid 6651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6651] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6651] close(3) = 0 [pid 6651] mkdir("./file0", 0777) = 0 [ 140.452885][ T6651] loop0: detected capacity change from 0 to 32768 [ 140.463174][ T6651] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6651) [ 140.479961][ T6651] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 140.488797][ T6651] BTRFS info (device loop0): using free space tree [pid 6651] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6651] chdir("./file0") = 0 [pid 6651] ioctl(4, LOOP_CLR_FD) = 0 [pid 6651] close(4) = 0 [pid 6651] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... futex resumed>) = 0 [pid 6650] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... futex resumed>) = 1 [pid 6651] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6651] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] <... futex resumed>) = 0 [pid 6650] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... futex resumed>) = 1 [ 140.508333][ T6651] BTRFS info (device loop0): enabling ssd optimizations [ 140.515456][ T6651] BTRFS info (device loop0): auto enabling async discard [ 140.547012][ T6651] BTRFS info (device loop0): balance: start -s [pid 6651] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6650] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6650] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6650] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6668 attached [pid 6668] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6668] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] <... clone resumed>, parent_tid=[259], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 259 [pid 6650] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] <... futex resumed>) = 0 [pid 6650] <... futex resumed>) = 1 [pid 6668] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6668] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6668] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6650] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] <... futex resumed>) = 0 [pid 6650] <... futex resumed>) = 1 [pid 6668] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 140.557672][ T6651] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6650] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6651] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6651] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 140.634365][ T6651] BTRFS info (device loop0): balance: ended with status: 0 [pid 6651] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6668] <... ioctl resumed>) = 0 [pid 6668] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6668] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] close(3) = 0 [pid 6650] close(4) = 0 [pid 6650] close(5) = 0 [pid 6650] close(6) = -1 EBADF (Bad file descriptor) [pid 6650] close(7) = -1 EBADF (Bad file descriptor) [pid 6650] close(8) = -1 EBADF (Bad file descriptor) [pid 6650] close(9) = -1 EBADF (Bad file descriptor) [pid 6650] close(10) = -1 EBADF (Bad file descriptor) [pid 6650] close(11) = -1 EBADF (Bad file descriptor) [pid 6650] close(12) = -1 EBADF (Bad file descriptor) [pid 6650] close(13) = -1 EBADF (Bad file descriptor) [pid 6650] close(14) = -1 EBADF (Bad file descriptor) [pid 6650] close(15) = -1 EBADF (Bad file descriptor) [pid 6650] close(16) = -1 EBADF (Bad file descriptor) [pid 6650] close(17) = -1 EBADF (Bad file descriptor) [pid 6650] close(18) = -1 EBADF (Bad file descriptor) [pid 6650] close(19) = -1 EBADF (Bad file descriptor) [pid 6650] close(20) = -1 EBADF (Bad file descriptor) [pid 6650] close(21) = -1 EBADF (Bad file descriptor) [pid 6650] close(22) = -1 EBADF (Bad file descriptor) [pid 6650] close(23) = -1 EBADF (Bad file descriptor) [pid 6650] close(24) = -1 EBADF (Bad file descriptor) [pid 6650] close(25) = -1 EBADF (Bad file descriptor) [pid 6650] close(26) = -1 EBADF (Bad file descriptor) [pid 6650] close(27) = -1 EBADF (Bad file descriptor) [pid 6650] close(28) = -1 EBADF (Bad file descriptor) [pid 6650] close(29) = -1 EBADF (Bad file descriptor) [pid 6650] exit_group(0 [pid 6668] <... futex resumed>) = ? [pid 6651] <... futex resumed>) = ? [pid 6650] <... exit_group resumed>) = ? [pid 6668] +++ exited with 0 +++ [pid 6651] +++ exited with 0 +++ [pid 6650] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=257, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./85/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./85/cgroup.cpu") = 0 [pid 5007] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./85/binderfs") = 0 [pid 5007] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./85/file0") = 0 [pid 5007] umount2("./85/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./85/cgroup") = 0 [pid 5007] umount2("./85/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./85/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./85/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./85") = 0 [pid 5007] mkdir("./86", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 260 ./strace-static-x86_64: Process 6669 attached [pid 6669] set_robust_list(0x5555571235e0, 24) = 0 [pid 6669] chdir("./86") = 0 [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6669] setpgid(0, 0) = 0 [pid 6669] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6669] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6669] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6669] write(3, "1000", 4) = 4 [pid 6669] close(3) = 0 [pid 6669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6669] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6670 attached , parent_tid=[261], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 261 [pid 6669] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6670] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6670] memfd_create("syzkaller", 0) = 3 [pid 6670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6670] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6670] close(3) = 0 [pid 6670] mkdir("./file0", 0777) = 0 [ 141.117103][ T6670] loop0: detected capacity change from 0 to 32768 [ 141.128442][ T6670] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6670) [ 141.146250][ T6670] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.155086][ T6670] BTRFS info (device loop0): using free space tree [pid 6670] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6670] chdir("./file0") = 0 [pid 6670] ioctl(4, LOOP_CLR_FD) = 0 [pid 6670] close(4) = 0 [pid 6670] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6670] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6670] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 141.175255][ T6670] BTRFS info (device loop0): enabling ssd optimizations [ 141.182262][ T6670] BTRFS info (device loop0): auto enabling async discard [pid 6670] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6669] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[262], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 262 [pid 6669] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6687 attached [pid 6687] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6687] openat(AT_FDCWD, ".", O_RDONLY) = 5 [ 141.227633][ T6670] BTRFS info (device loop0): balance: start -s [ 141.236731][ T6670] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6687] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6687] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 141.277914][ T6670] BTRFS info (device loop0): balance: ended with status: 0 [pid 6670] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6670] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6670] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6687] <... ioctl resumed>) = 0 [pid 6687] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] close(3 [pid 6687] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] <... close resumed>) = 0 [pid 6669] close(4) = 0 [pid 6669] close(5) = 0 [pid 6669] close(6) = -1 EBADF (Bad file descriptor) [pid 6669] close(7) = -1 EBADF (Bad file descriptor) [pid 6669] close(8) = -1 EBADF (Bad file descriptor) [pid 6669] close(9) = -1 EBADF (Bad file descriptor) [pid 6669] close(10) = -1 EBADF (Bad file descriptor) [pid 6669] close(11) = -1 EBADF (Bad file descriptor) [pid 6669] close(12) = -1 EBADF (Bad file descriptor) [pid 6669] close(13) = -1 EBADF (Bad file descriptor) [pid 6669] close(14) = -1 EBADF (Bad file descriptor) [pid 6669] close(15) = -1 EBADF (Bad file descriptor) [pid 6669] close(16) = -1 EBADF (Bad file descriptor) [pid 6669] close(17) = -1 EBADF (Bad file descriptor) [pid 6669] close(18) = -1 EBADF (Bad file descriptor) [pid 6669] close(19) = -1 EBADF (Bad file descriptor) [pid 6669] close(20) = -1 EBADF (Bad file descriptor) [pid 6669] close(21) = -1 EBADF (Bad file descriptor) [pid 6669] close(22) = -1 EBADF (Bad file descriptor) [pid 6669] close(23) = -1 EBADF (Bad file descriptor) [pid 6669] close(24) = -1 EBADF (Bad file descriptor) [pid 6669] close(25) = -1 EBADF (Bad file descriptor) [pid 6669] close(26) = -1 EBADF (Bad file descriptor) [pid 6669] close(27) = -1 EBADF (Bad file descriptor) [pid 6669] close(28) = -1 EBADF (Bad file descriptor) [pid 6669] close(29) = -1 EBADF (Bad file descriptor) [pid 6669] exit_group(0 [pid 6687] <... futex resumed>) = ? [pid 6670] <... futex resumed>) = ? [pid 6669] <... exit_group resumed>) = ? [pid 6687] +++ exited with 0 +++ [pid 6670] +++ exited with 0 +++ [pid 6669] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=260, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./86/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./86/cgroup.cpu") = 0 [pid 5007] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./86/binderfs") = 0 [pid 5007] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./86/file0") = 0 [pid 5007] umount2("./86/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./86/cgroup") = 0 [pid 5007] umount2("./86/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./86/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./86/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./86") = 0 [pid 5007] mkdir("./87", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 263 ./strace-static-x86_64: Process 6688 attached [pid 6688] set_robust_list(0x5555571235e0, 24) = 0 [pid 6688] chdir("./87") = 0 [pid 6688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6688] setpgid(0, 0) = 0 [pid 6688] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6688] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6688] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6688] write(3, "1000", 4) = 4 [pid 6688] close(3) = 0 [pid 6688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6688] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6688] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6689 attached , parent_tid=[264], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 264 [pid 6689] set_robust_list(0x7fd090fc79e0, 24 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... set_robust_list resumed>) = 0 [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6689] memfd_create("syzkaller", 0) = 3 [pid 6689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6689] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6689] close(3) = 0 [pid 6689] mkdir("./file0", 0777) = 0 [ 141.798781][ T6689] loop0: detected capacity change from 0 to 32768 [ 141.808857][ T6689] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6689) [ 141.826020][ T6689] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.834780][ T6689] BTRFS info (device loop0): using free space tree [pid 6689] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6689] chdir("./file0") = 0 [pid 6689] ioctl(4, LOOP_CLR_FD) = 0 [pid 6689] close(4) = 0 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] <... futex resumed>) = 0 [pid 6689] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... openat resumed>) = 4 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... futex resumed>) = 0 [pid 6689] <... futex resumed>) = 1 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [ 141.855956][ T6689] BTRFS info (device loop0): enabling ssd optimizations [ 141.863111][ T6689] BTRFS info (device loop0): auto enabling async discard [pid 6689] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6688] <... futex resumed>) = 0 [ 141.926815][ T6689] BTRFS info (device loop0): balance: start -s [ 141.935205][ T6689] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6688] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6688] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6688] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[265], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 265 [pid 6688] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6706 attached ) = 0 [pid 6688] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6706] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6706] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6706] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... futex resumed>) = 0 [pid 6688] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 6688] <... futex resumed>) = 1 [pid 6689] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6688] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] <... futex resumed>) = 1 [ 141.967633][ T6689] BTRFS info (device loop0): balance: ended with status: 0 [pid 6706] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] <... ioctl resumed>) = 0 [pid 6689] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] close(3) = 0 [pid 6688] close(4) = 0 [pid 6688] close(5) = 0 [pid 6688] close(6) = -1 EBADF (Bad file descriptor) [pid 6688] close(7) = -1 EBADF (Bad file descriptor) [pid 6688] close(8) = -1 EBADF (Bad file descriptor) [pid 6688] close(9) = -1 EBADF (Bad file descriptor) [pid 6688] close(10) = -1 EBADF (Bad file descriptor) [pid 6688] close(11) = -1 EBADF (Bad file descriptor) [pid 6688] close(12) = -1 EBADF (Bad file descriptor) [pid 6688] close(13) = -1 EBADF (Bad file descriptor) [pid 6688] close(14) = -1 EBADF (Bad file descriptor) [pid 6688] close(15) = -1 EBADF (Bad file descriptor) [pid 6688] close(16) = -1 EBADF (Bad file descriptor) [pid 6688] close(17) = -1 EBADF (Bad file descriptor) [pid 6688] close(18) = -1 EBADF (Bad file descriptor) [pid 6688] close(19) = -1 EBADF (Bad file descriptor) [pid 6688] close(20) = -1 EBADF (Bad file descriptor) [pid 6688] close(21) = -1 EBADF (Bad file descriptor) [pid 6688] close(22) = -1 EBADF (Bad file descriptor) [pid 6688] close(23) = -1 EBADF (Bad file descriptor) [pid 6688] close(24) = -1 EBADF (Bad file descriptor) [pid 6688] close(25) = -1 EBADF (Bad file descriptor) [pid 6688] close(26) = -1 EBADF (Bad file descriptor) [pid 6688] close(27) = -1 EBADF (Bad file descriptor) [pid 6688] close(28) = -1 EBADF (Bad file descriptor) [pid 6688] close(29) = -1 EBADF (Bad file descriptor) [pid 6688] exit_group(0 [pid 6706] <... futex resumed>) = ? [pid 6689] <... futex resumed>) = ? [pid 6688] <... exit_group resumed>) = ? [pid 6706] +++ exited with 0 +++ [pid 6689] +++ exited with 0 +++ [pid 6688] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=263, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5007] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./87/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./87/cgroup.cpu") = 0 [pid 5007] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./87/binderfs") = 0 [pid 5007] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./87/file0") = 0 [pid 5007] umount2("./87/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./87/cgroup") = 0 [pid 5007] umount2("./87/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./87/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./87/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./87") = 0 [pid 5007] mkdir("./88", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 266 ./strace-static-x86_64: Process 6707 attached [pid 6707] set_robust_list(0x5555571235e0, 24) = 0 [pid 6707] chdir("./88") = 0 [pid 6707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6707] setpgid(0, 0) = 0 [pid 6707] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6707] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6707] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6707] write(3, "1000", 4) = 4 [pid 6707] close(3) = 0 [pid 6707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6707] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6707] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[267], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 267 [pid 6707] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6708 attached [pid 6708] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6708] memfd_create("syzkaller", 0) = 3 [pid 6708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6708] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6708] close(3) = 0 [pid 6708] mkdir("./file0", 0777) = 0 [ 142.488952][ T6708] loop0: detected capacity change from 0 to 32768 [ 142.500220][ T6708] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6708) [ 142.518697][ T6708] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 142.527715][ T6708] BTRFS info (device loop0): using free space tree [pid 6708] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6708] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6708] chdir("./file0") = 0 [pid 6708] ioctl(4, LOOP_CLR_FD) = 0 [pid 6708] close(4) = 0 [pid 6708] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6708] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6707] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] <... openat resumed>) = 4 [pid 6707] <... futex resumed>) = 0 [pid 6708] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6708] <... futex resumed>) = 0 [pid 6707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6708] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6707] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 142.547425][ T6708] BTRFS info (device loop0): enabling ssd optimizations [ 142.555703][ T6708] BTRFS info (device loop0): auto enabling async discard [ 142.588938][ T6708] BTRFS info (device loop0): balance: start -s [ 142.597902][ T6708] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6707] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6707] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6707] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6707] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6725 attached , parent_tid=[268], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 268 [pid 6707] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] set_robust_list(0x7fd089ba69e0, 24 [pid 6707] <... futex resumed>) = 0 [pid 6725] <... set_robust_list resumed>) = 0 [pid 6707] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6725] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6725] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6707] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 142.630945][ T6708] BTRFS info (device loop0): balance: ended with status: 0 [pid 6707] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6708] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6708] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6708] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] <... ioctl resumed>) = 0 [pid 6725] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6707] close(3) = 0 [pid 6707] close(4) = 0 [pid 6707] close(5) = 0 [pid 6707] close(6) = -1 EBADF (Bad file descriptor) [pid 6707] close(7) = -1 EBADF (Bad file descriptor) [pid 6707] close(8) = -1 EBADF (Bad file descriptor) [pid 6707] close(9) = -1 EBADF (Bad file descriptor) [pid 6707] close(10) = -1 EBADF (Bad file descriptor) [pid 6707] close(11) = -1 EBADF (Bad file descriptor) [pid 6707] close(12) = -1 EBADF (Bad file descriptor) [pid 6707] close(13) = -1 EBADF (Bad file descriptor) [pid 6707] close(14) = -1 EBADF (Bad file descriptor) [pid 6707] close(15) = -1 EBADF (Bad file descriptor) [pid 6707] close(16) = -1 EBADF (Bad file descriptor) [pid 6707] close(17) = -1 EBADF (Bad file descriptor) [pid 6707] close(18) = -1 EBADF (Bad file descriptor) [pid 6707] close(19) = -1 EBADF (Bad file descriptor) [pid 6707] close(20) = -1 EBADF (Bad file descriptor) [pid 6707] close(21) = -1 EBADF (Bad file descriptor) [pid 6707] close(22) = -1 EBADF (Bad file descriptor) [pid 6707] close(23) = -1 EBADF (Bad file descriptor) [pid 6707] close(24) = -1 EBADF (Bad file descriptor) [pid 6707] close(25) = -1 EBADF (Bad file descriptor) [pid 6707] close(26) = -1 EBADF (Bad file descriptor) [pid 6707] close(27) = -1 EBADF (Bad file descriptor) [pid 6707] close(28) = -1 EBADF (Bad file descriptor) [pid 6707] close(29) = -1 EBADF (Bad file descriptor) [pid 6707] exit_group(0 [pid 6708] <... futex resumed>) = ? [pid 6725] <... futex resumed>) = ? [pid 6707] <... exit_group resumed>) = ? [pid 6708] +++ exited with 0 +++ [pid 6725] +++ exited with 0 +++ [pid 6707] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=266, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./88/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./88/cgroup.cpu") = 0 [pid 5007] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./88/binderfs") = 0 [pid 5007] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./88/file0") = 0 [pid 5007] umount2("./88/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./88/cgroup") = 0 [pid 5007] umount2("./88/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./88/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./88/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./88") = 0 [pid 5007] mkdir("./89", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 269 ./strace-static-x86_64: Process 6726 attached [pid 6726] set_robust_list(0x5555571235e0, 24) = 0 [pid 6726] chdir("./89") = 0 [pid 6726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6726] setpgid(0, 0) = 0 [pid 6726] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6726] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6726] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6726] write(3, "1000", 4) = 4 [pid 6726] close(3) = 0 [pid 6726] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6726] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6726] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[270], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 270 [pid 6726] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6727 attached [pid 6727] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6727] memfd_create("syzkaller", 0) = 3 [pid 6727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6727] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6727] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6727] close(3) = 0 [pid 6727] mkdir("./file0", 0777) = 0 [ 143.131394][ T6727] loop0: detected capacity change from 0 to 32768 [ 143.145085][ T6727] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6727) [ 143.162955][ T6727] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.171974][ T6727] BTRFS info (device loop0): using free space tree [pid 6727] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6727] chdir("./file0") = 0 [pid 6727] ioctl(4, LOOP_CLR_FD) = 0 [pid 6727] close(4) = 0 [pid 6727] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6727] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6726] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... openat resumed>) = 4 [pid 6726] <... futex resumed>) = 0 [pid 6727] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] <... futex resumed>) = 0 [pid 6726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6727] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6726] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 143.190447][ T6727] BTRFS info (device loop0): enabling ssd optimizations [ 143.197715][ T6727] BTRFS info (device loop0): auto enabling async discard [pid 6726] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6726] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6726] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6726] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[271], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 271 [pid 6726] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6744 attached [pid 6744] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6744] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6744] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6726] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6726] <... futex resumed>) = 0 [ 143.231781][ T6727] BTRFS info (device loop0): balance: start -s [ 143.241154][ T6727] BTRFS info (device loop0): relocating block group 1048576 flags system [ 143.270166][ T6727] BTRFS info (device loop0): balance: ended with status: 0 [pid 6726] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6727] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6726] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6744] <... ioctl resumed>) = 0 [pid 6744] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] close(3 [pid 6744] <... futex resumed>) = 0 [pid 6744] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6726] <... close resumed>) = 0 [pid 6726] close(4) = 0 [pid 6726] close(5) = 0 [pid 6726] close(6) = -1 EBADF (Bad file descriptor) [pid 6726] close(7) = -1 EBADF (Bad file descriptor) [pid 6726] close(8) = -1 EBADF (Bad file descriptor) [pid 6726] close(9) = -1 EBADF (Bad file descriptor) [pid 6726] close(10) = -1 EBADF (Bad file descriptor) [pid 6726] close(11) = -1 EBADF (Bad file descriptor) [pid 6726] close(12) = -1 EBADF (Bad file descriptor) [pid 6726] close(13) = -1 EBADF (Bad file descriptor) [pid 6726] close(14) = -1 EBADF (Bad file descriptor) [pid 6726] close(15) = -1 EBADF (Bad file descriptor) [pid 6726] close(16) = -1 EBADF (Bad file descriptor) [pid 6726] close(17) = -1 EBADF (Bad file descriptor) [pid 6726] close(18) = -1 EBADF (Bad file descriptor) [pid 6726] close(19) = -1 EBADF (Bad file descriptor) [pid 6726] close(20) = -1 EBADF (Bad file descriptor) [pid 6726] close(21) = -1 EBADF (Bad file descriptor) [pid 6726] close(22) = -1 EBADF (Bad file descriptor) [pid 6726] close(23) = -1 EBADF (Bad file descriptor) [pid 6726] close(24) = -1 EBADF (Bad file descriptor) [pid 6726] close(25) = -1 EBADF (Bad file descriptor) [pid 6726] close(26) = -1 EBADF (Bad file descriptor) [pid 6726] close(27) = -1 EBADF (Bad file descriptor) [pid 6726] close(28) = -1 EBADF (Bad file descriptor) [pid 6726] close(29) = -1 EBADF (Bad file descriptor) [pid 6726] exit_group(0 [pid 6727] <... futex resumed>) = ? [pid 6744] <... futex resumed>) = ? [pid 6726] <... exit_group resumed>) = ? [pid 6727] +++ exited with 0 +++ [pid 6744] +++ exited with 0 +++ [pid 6726] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=269, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5007] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./89/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./89/cgroup.cpu") = 0 [pid 5007] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./89/binderfs") = 0 [pid 5007] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./89/file0") = 0 [pid 5007] umount2("./89/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./89/cgroup") = 0 [pid 5007] umount2("./89/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./89/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./89/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./89") = 0 [pid 5007] mkdir("./90", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6745 attached , child_tidptr=0x5555571235d0) = 272 [pid 6745] set_robust_list(0x5555571235e0, 24) = 0 [pid 6745] chdir("./90") = 0 [pid 6745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6745] setpgid(0, 0) = 0 [pid 6745] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6745] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6745] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6745] write(3, "1000", 4) = 4 [pid 6745] close(3) = 0 [pid 6745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6745] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6746 attached , parent_tid=[273], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 273 [pid 6746] set_robust_list(0x7fd090fc79e0, 24) = 0 [pid 6745] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6746] memfd_create("syzkaller", 0) = 3 [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6746] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6746] close(3) = 0 [pid 6746] mkdir("./file0", 0777) = 0 [ 143.824914][ T6746] loop0: detected capacity change from 0 to 32768 [ 143.836646][ T6746] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6746) [ 143.854105][ T6746] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.862980][ T6746] BTRFS info (device loop0): using free space tree [pid 6746] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6746] chdir("./file0") = 0 [pid 6746] ioctl(4, LOOP_CLR_FD) = 0 [pid 6746] close(4) = 0 [pid 6746] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000) = 4 [pid 6746] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 143.882151][ T6746] BTRFS info (device loop0): enabling ssd optimizations [ 143.889308][ T6746] BTRFS info (device loop0): auto enabling async discard [pid 6746] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6745] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6745] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6745] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[274], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 274 [pid 6745] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6763 attached [pid 6763] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6763] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6763] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... futex resumed>) = 0 [pid 6745] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6745] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6763] <... futex resumed>) = 1 [ 143.932706][ T6746] BTRFS info (device loop0): balance: start -s [ 143.942001][ T6746] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6763] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [pid 6745] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 144.017217][ T6746] BTRFS info (device loop0): balance: ended with status: 0 [pid 6763] <... ioctl resumed>) = 0 [pid 6746] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6746] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6763] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] close(3) = 0 [pid 6745] close(4) = 0 [pid 6745] close(5) = 0 [pid 6745] close(6) = -1 EBADF (Bad file descriptor) [pid 6745] close(7) = -1 EBADF (Bad file descriptor) [pid 6745] close(8) = -1 EBADF (Bad file descriptor) [pid 6745] close(9) = -1 EBADF (Bad file descriptor) [pid 6745] close(10) = -1 EBADF (Bad file descriptor) [pid 6745] close(11) = -1 EBADF (Bad file descriptor) [pid 6745] close(12) = -1 EBADF (Bad file descriptor) [pid 6745] close(13) = -1 EBADF (Bad file descriptor) [pid 6745] close(14) = -1 EBADF (Bad file descriptor) [pid 6745] close(15) = -1 EBADF (Bad file descriptor) [pid 6745] close(16) = -1 EBADF (Bad file descriptor) [pid 6745] close(17) = -1 EBADF (Bad file descriptor) [pid 6745] close(18) = -1 EBADF (Bad file descriptor) [pid 6745] close(19) = -1 EBADF (Bad file descriptor) [pid 6745] close(20) = -1 EBADF (Bad file descriptor) [pid 6745] close(21) = -1 EBADF (Bad file descriptor) [pid 6745] close(22) = -1 EBADF (Bad file descriptor) [pid 6745] close(23) = -1 EBADF (Bad file descriptor) [pid 6745] close(24) = -1 EBADF (Bad file descriptor) [pid 6745] close(25) = -1 EBADF (Bad file descriptor) [pid 6745] close(26) = -1 EBADF (Bad file descriptor) [pid 6745] close(27) = -1 EBADF (Bad file descriptor) [pid 6745] close(28) = -1 EBADF (Bad file descriptor) [pid 6745] close(29) = -1 EBADF (Bad file descriptor) [pid 6745] exit_group(0 [pid 6746] <... futex resumed>) = ? [pid 6745] <... exit_group resumed>) = ? [pid 6746] +++ exited with 0 +++ [pid 6763] <... futex resumed>) = ? [pid 6763] +++ exited with 0 +++ [pid 6745] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=272, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5007] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./90/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./90/cgroup.cpu") = 0 [pid 5007] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./90/binderfs") = 0 [pid 5007] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./90/file0") = 0 [pid 5007] umount2("./90/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./90/cgroup") = 0 [pid 5007] umount2("./90/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./90/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./90/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./90") = 0 [pid 5007] mkdir("./91", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6764 attached [pid 6764] set_robust_list(0x5555571235e0, 24 [pid 5007] <... clone resumed>, child_tidptr=0x5555571235d0) = 275 [pid 6764] <... set_robust_list resumed>) = 0 [pid 6764] chdir("./91") = 0 [pid 6764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6764] setpgid(0, 0) = 0 [pid 6764] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6764] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6764] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6764] write(3, "1000", 4) = 4 [pid 6764] close(3) = 0 [pid 6764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6764] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6765 attached [pid 6765] set_robust_list(0x7fd090fc79e0, 24 [pid 6764] <... clone resumed>, parent_tid=[276], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 276 [pid 6765] <... set_robust_list resumed>) = 0 [pid 6764] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6765] memfd_create("syzkaller", 0) = 3 [pid 6765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd088ba7000 [pid 6765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6765] munmap(0x7fd088ba7000, 16777216) = 0 [pid 6765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6765] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6765] close(3) = 0 [pid 6765] mkdir("./file0", 0777) = 0 [ 144.492932][ T6765] loop0: detected capacity change from 0 to 32768 [ 144.504065][ T6765] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor318 (6765) [ 144.521971][ T6765] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 144.531117][ T6765] BTRFS info (device loop0): using free space tree [pid 6765] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 6765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6765] chdir("./file0") = 0 [pid 6765] ioctl(4, LOOP_CLR_FD) = 0 [pid 6765] close(4) = 0 [pid 6765] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... futex resumed>) = 0 [pid 6765] <... futex resumed>) = 1 [pid 6765] openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC, 000 [pid 6764] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6765] <... openat resumed>) = 4 [pid 6765] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... futex resumed>) = 0 [pid 6765] <... futex resumed>) = 1 [pid 6764] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6765] ioctl(4, BTRFS_IOC_BALANCE_V2, {flags=BTRFS_BALANCE_SYSTEM, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}} [pid 6764] <... futex resumed>) = 0 [ 144.551605][ T6765] BTRFS info (device loop0): enabling ssd optimizations [ 144.558882][ T6765] BTRFS info (device loop0): auto enabling async discard [pid 6764] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6764] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd089b86000 [pid 6764] mprotect(0x7fd089b87000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] clone(child_stack=0x7fd089ba63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6782 attached [pid 6782] set_robust_list(0x7fd089ba69e0, 24) = 0 [pid 6782] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6764] <... clone resumed>, parent_tid=[277], tls=0x7fd089ba6700, child_tidptr=0x7fd089ba69d0) = 277 [ 144.603033][ T6765] BTRFS info (device loop0): balance: start -s [ 144.611988][ T6765] BTRFS info (device loop0): relocating block group 1048576 flags system [pid 6764] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6764] <... futex resumed>) = 1 [pid 6782] openat(AT_FDCWD, ".", O_RDONLY) = 5 [pid 6782] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6764] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6764] futex(0x7fd0910a67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6764] <... futex resumed>) = 1 [pid 6782] ioctl(5, FITRIM, {start=0, len=18014398509481984, minlen=0} [ 144.654550][ T6765] BTRFS info (device loop0): balance: ended with status: 0 [pid 6764] futex(0x7fd0910a67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 6765] <... ioctl resumed> => {flags=BTRFS_BALANCE_SYSTEM, state=0, sys={profiles=0, usage=0, devid=makedev(0, 0), pstart=0, pend=0, vstart=0, vend=0, target=0, flags=0}}) = 0 [pid 6765] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6765] futex(0x7fd0910a67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] <... ioctl resumed>) = 0 [pid 6782] futex(0x7fd0910a67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7fd0910a67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6764] close(3) = 0 [pid 6764] close(4) = 0 [pid 6764] close(5) = 0 [pid 6764] close(6) = -1 EBADF (Bad file descriptor) [pid 6764] close(7) = -1 EBADF (Bad file descriptor) [pid 6764] close(8) = -1 EBADF (Bad file descriptor) [pid 6764] close(9) = -1 EBADF (Bad file descriptor) [pid 6764] close(10) = -1 EBADF (Bad file descriptor) [pid 6764] close(11) = -1 EBADF (Bad file descriptor) [pid 6764] close(12) = -1 EBADF (Bad file descriptor) [pid 6764] close(13) = -1 EBADF (Bad file descriptor) [pid 6764] close(14) = -1 EBADF (Bad file descriptor) [pid 6764] close(15) = -1 EBADF (Bad file descriptor) [pid 6764] close(16) = -1 EBADF (Bad file descriptor) [pid 6764] close(17) = -1 EBADF (Bad file descriptor) [pid 6764] close(18) = -1 EBADF (Bad file descriptor) [pid 6764] close(19) = -1 EBADF (Bad file descriptor) [pid 6764] close(20) = -1 EBADF (Bad file descriptor) [pid 6764] close(21) = -1 EBADF (Bad file descriptor) [pid 6764] close(22) = -1 EBADF (Bad file descriptor) [pid 6764] close(23) = -1 EBADF (Bad file descriptor) [pid 6764] close(24) = -1 EBADF (Bad file descriptor) [pid 6764] close(25) = -1 EBADF (Bad file descriptor) [pid 6764] close(26) = -1 EBADF (Bad file descriptor) [pid 6764] close(27) = -1 EBADF (Bad file descriptor) [pid 6764] close(28) = -1 EBADF (Bad file descriptor) [pid 6764] close(29) = -1 EBADF (Bad file descriptor) [pid 6764] exit_group(0 [pid 6782] <... futex resumed>) = ? [pid 6765] <... futex resumed>) = ? [pid 6764] <... exit_group resumed>) = ? [pid 6782] +++ exited with 0 +++ [pid 6765] +++ exited with 0 +++ [pid 6764] +++ exited with 0 +++ [pid 5007] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=275, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} --- [pid 5007] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5007] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5007] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(3, 0x555557124620 /* 7 entries */, 32768) = 208 [pid 5007] umount2("./91/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./91/cgroup.cpu") = 0 [pid 5007] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5007] unlink("./91/binderfs") = 0 [pid 5007] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5007] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5007] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5007] getdents64(4, 0x55555712c660 /* 2 entries */, 32768) = 48 [pid 5007] getdents64(4, 0x55555712c660 /* 0 entries */, 32768) = 0 [pid 5007] close(4) = 0 [pid 5007] rmdir("./91/file0") = 0 [pid 5007] umount2("./91/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}) = 0 [pid 5007] unlink("./91/cgroup") = 0 [pid 5007] umount2("./91/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5007] lstat("./91/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}) = 0 [pid 5007] unlink("./91/cgroup.net") = 0 [pid 5007] getdents64(3, 0x555557124620 /* 0 entries */, 32768) = 0 [pid 5007] close(3) = 0 [pid 5007] rmdir("./91") = 0 [pid 5007] mkdir("./92", 0777) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5007] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5007] close(3) = 0 [pid 5007] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571235d0) = 278 ./strace-static-x86_64: Process 6783 attached [pid 6783] set_robust_list(0x5555571235e0, 24) = 0 [pid 6783] chdir("./92") = 0 [pid 6783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6783] setpgid(0, 0) = 0 [pid 6783] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6783] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6783] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6783] write(3, "1000", 4) = 4 [pid 6783] close(3) = 0 [pid 6783] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6783] futex(0x7fd0910a67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd090fa7000 [pid 6783] mprotect(0x7fd090fa8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6783] clone(child_stack=0x7fd090fc73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[279], tls=0x7fd090fc7700, child_tidptr=0x7fd090fc79d0) = 279 [pid 6783] futex(0x7fd0910a67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] futex(0x7fd0910a67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6784 attached